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FOIPA Request No.: 1329073-000 
Subject: Carnivore 


Dear Ms. O’Brien: 

Records responsive to your request were previously processed under the provisions of the Freedom 
of Information Act. Enclosed is one CD containing 605 pages of previously processed documents and a copy 
of the Explanation of Exemptions. Please be advised, these are the only copies of these documents located 
in our possession. The original copies of these documents could not be located for reprocessing. 

Additional records potentially responsive to your subject exist. The Federal Bureau of Investigation 
(FBI) has located approximately 1,594 pages total of records potentially responsive to the subject of your 
request. By DOJ regulation, the FBI notifies requesters when anticipated fees exceed $25.00. 

If all potentially responsive pages are released on CD, you will owe $40.00 in duplication fees (3 CDs 
at $15.00 each, less $5.00 credit for the first CD). Releases are made on CD unless otherwise requested. 
Each CD contains approximately 500 reviewed pages per release. The 500 page estimate is based on our 
business practice of processing complex cases in segments. 

Should you request that the release be made in paper, you will owe $79.70 based on a duplication 
fee of five cents per page. See 28 CFR §16.10 and 16.49. 

If you agree to receive all responsive material on CD, you will receive a $5.00 credit towards your first 
interim CD. As a result, we must notify you there will be a $25.00 charge when the second interim release is 
made in this case. At that time you will be billed for the $1 0.00 remaining from the $1 5.00 free of the first 
release, as well as the $15.00 duplication fee for the second release, for a total of $25.00. 

Please remember this is only an estimate, and some of the information may be withheld in full 
pursuant to FOIA/Privacy Act Exemptions(s). Also, some information may not be responsive to your subject. 
Thus, the actual charges could be less. 


Requester Response 


No payment is required at this time . If your request does not qualify for eFOIA releases, you must 
notify us in writing within thirty (30) days from the date of this letter of your format decision (paper or 
CD). You must also indicate your preference in the handling of your request in reference to the 
estimated duplication fees from the following four (4) options: 

I am willing to pay estimated duplication/ international shipping fees up to the amount 
specified in this letter. 

I am willing to pay fees of a different amount. 

Please specify amount: 

n Provide me 100 pages or the cost equivalent ($5.00) free of charge. If applicable, I am 
willing to pay International shipping fees. 

Cancel my request. 

If we do not receive your duplication format decision and/or estimated duplication fee selection within 
thirty (30) days of the date of this notification, your request will be closed. Include the FOIPA 
Request Number listed above in any communication regarding this matter. 


For your information, Congress excluded three discrete categories of law enforcement and national 
security records from the requirements of the FOIA. See 5 U.S. C. § 552(c) (2006 & Supp. IV (2010). This 
response is limited to those records that are subject to the requirements of the FOIA. This is a standard 
notification that is given to all our requesters and should not be taken as an indication that excluded records 
do, or do not, exist. 

You have the opportunity to reduce the scope of your request; this will accelerate the process and 
could potentially place your request in a quicker processing queue. This may also reduce search and 
duplication costs and allow for a more timely receipt of your information. The FBI uses a multi-queue 
processing system to fairly assign and process new requests. Simple request queue cases (50 pages or 
less) usually require the least time to process. 

Please advise in writing if you would like to discuss reducing the scope of your request and your 
willingness to pay the estimated search and duplication costs indicated above. Provide a telephone number, 
if one is available, where you can be reached between 8:00 a.m. and 5:00 p.m., Eastern Standard Time. Mail 
your response to: Work Process Unit; Record Information/Dissemination Section; Records 
Management Division; Federal Bureau of Investigation; 170 Marcel Drive; Winchester, VA 22602. You 
may also fax your response to: 540-868-4997, Attention: Work Process Unit. 

For questions regarding our determinations, visit the www.fbi.gov/foia website under “Contact Us.” 
The FOIPA Request number listed above has been assigned to your request. Please use this number in all 
correspondence concerning your request. Your patience is appreciated. 
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^no d^rilS FBI Infemet-wlretap system review 
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WASfflNGTON, My 27 (Reuters} - U.S. Attorney General Janet Reno described on Thursday a two-step process to review a 
new FBI Wemef-wiretap system called Carnivore that has raised privacy concerns. 

* <iy -•»*■ • ¥ -w • >a . ^ * » . . . 

With lawmakers and privacy advocates concerned the system allows for widespread surveillance of e-mails, Reno said the first 
step will be for a group of academic experts to conduct a detailed review of the computer program's source code. 


"Those experts win report their findings to a pane! of interested parties, people from the telecommunications and computer 
industries, as well as privacy experts/ Reno told her weekly Justice Department news briefing. . .. *&»%' - 

"Tm very anxious to get this review under way. The FBI is working on It, and representations of the bureau are meeting with 
privacy advocates and representatives of the telecommunications and computer industry to pursue it and to develop a protocol fo 
the redew/ she said. 

The system allows the FBI to intercept the e-mails of a criminal suspect among the flood of ©therdata passing through an 
Internet sendee provider. 

FBI officials maintain the court-authorised wiretaps will only focus on criminal suspects who are targets of an investigation. But 
privacy advocates fear the system may cast too wide a net, encompassing private information about legal activities, 

Reno said the two-step process was worked out with the FBI, and that she wanted the review to be done "'as soon as possible/ 

She said the system would not be suspended until the review has been completed. T think that we will continue to make sure 
that it is implemented carefully and there is no abuse in its use/ 

fn a letter to Reno, 27 House of Representatives Republicans and one Democrat expressed ""strong reservations* about the 
system and urged Reno to halt its operation "until the serious privacy issues have been satisfactorily answered/ 

The lawmakers added, "‘People should feel secure that the federal government is- not reading their e-mail, no matter how worthy 
the objective,* 

Reno stopped short of agreeing to release the source code. The American Civil liberties Union has asked for it to be made publi 
so it could evaluate the software's true capabilities, 

14:06 07*27450 

Copyright 2000 Reuters Limited, Ah rights reserve#. Repuhflcation or redistribution of Reuters content including byframhg or simiior means, /s' 1 ' 
expressly prohibite# vtithout the prior written cm sent of Reuters, Reuters shelf not be liable for any errors or delays in the content or for any actions 
taken in reliance thereon. All active hyperlinks have bwn inserted byAOL 
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B ^^^A ddresses E-mail Surveillance . 

||| '% fho Assodateb Press . . / . 

m : * 

iff WASHINGTON (AP) * A move is under way in Congress to increase the burden on federal law enforcement agencies to justify 
jv|k monitoring people* e-mail messages and other communications. 1 

8 Rep. Boh Barn eonffmted that he and his staff are at work on a bill that would ran in the FBI’s new ‘'Carnivore* surveillance 
system and place additional restrictions on telephone wiretaps as we#. 

Barr, R-G£, said he was concerned about computer eavesdropping capability before attending a hearing on Capitol Hill earlier 
this week, and he said he "came out of it scared.* 

v Privacy advocates and computer experts called Carnivore a "black box* in testimony Monday, and said only the FBI knows whal 
v n <*»«- 'Hwy also contended that information the FBI gets from the device, installed at a suspect* Internet service provider, 
* is for more than what could be gleaned from a telephone wiretap and statutes governing telephone surveillance are being 
misused. 

.• h 8 f®lepf»bne "trap-and-trace* or "pen register* wiretap, authorities can get a fist of phone calls made to and from a certain 
telephone number. The usable Information is limited to the 10-digit telephone numbers and the time of the call, and the phone 
company, when given a court order, provides the information. 

Current taws and Judicial precedent say that the numbers a person diais are not private communications, and therefore 
authorities do not need to show that a crime has been committed. 

With Carnivora, that statute is being extended to the Internet world. 

v , 

The details of Barr's bill aren’t clear yet, but he said it wouid address the issue of translating telephone wiretap law to the Internet 
by designing strict constraints for monitoring the medium. It would also make sure that evidence gained from an e-mail tap would 
not yield more information than a similar court order for a telephone tap. f 

The FBI* new surveillance mechanism sits at the subject* ISP and scans the addressing information coming from or going to 
the suspect* computer. This can reveal for more information than a simple e-mail address, such as a subject line describing the 
contents of the messaga 

"Capturing internet origin and destination address instead of hum hers dialed’ could create a much more intrusive form of 
surveillance that is not clearly supported by law,* said Alan B. Davidson, staff counsel at the Center for Democracy and 
Technology. 

£ ~ ■ . •, ... ' ^ 

Fa- authorities to be able to request e-maii contents they must show probable cause and obtain a search warrant. The same is 
i true for listening in on a telephone call 

V 

Regarding the inner workings of Carnivore, the FBI Is resisting a Freedom of Information Act request by the American Civil 
t liberties Union for Carnivore* computer code, but said It will submit to an externa! review. ' ■ 

Smce the Carnivore computer, devoid of keyboard and mouse, sits at the suspect* ISP and is locked down from any 
manipulation from non-FBI personnel, Internet providers have bristled at the Idea of Jetting it sit on their networks. 

Donald M. Kerr, assistant director of the bureau* laboratory division, said in an interview that the FBI would love to have the ISP 
proude the information authorities need, but the cost and technical knowledge can be prohibitive for small Internet companies. 

Peter William Sachs, a lawyer and president of iCONN, a small Internet provider in Connecticut, sad the Job could be done with 

two tines of computer code, and called it a "trivial* task. 
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^mctHKmBeS, not satisfied with the FBfb explanation," 

ha\e a stiff challenge jn keeping apace of the changes in technology. 


i monitor (Mnatis, Kerr said, but it a!so can monitor Web browsing, chat rooms and ail sorts of other 


1 agument that although Carnivore can read those things, ills a difference between "capabiiity and 

auoWBjMfibn," Ketr vahters- .• ? ->u>. ■ , , ... . - ^ / 

■ '■*&;: :,., . ... '.. •' '■'■■' ' - , - * * 

'£<w- •£•■•>' ?%;■ . v^m • .' ; 

People seem to conjure up this vision that FBI personnel are unsupenased and unconstrained in the use of these tods * he 

th8S8 a f’ orfUes to 00 outsfde {he sc °P e of court order is to commit a federai felony. It’s, to me not 
of our ^^oyeesvrouid run that kind of risk in doing their jd)* ' ’ 

“ ***** ** c ‘"" i ''” ,h “ k “ ps teck ° ,i,s ** <**«***«■ •« •» •« wi 

Barr said he expects resistance from other legislators, even from other Republicans, but said he will not let the FBI oo 
,. unchecked ' w 

"They want to fust go out and rely on scaring people to death, that if they don't get this authority, the terrorists wil! take over the 
. , r country, and say WeVe out to save the world,* * Barr said. 

AP-NY -07-27-00 0904EDT 
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Jiaiy 27 , 2000 ^ ^ '* f ■ > fittfe#* : 4 • • , . 
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^ P ‘ C ? n rf dy Introduces M to Update Wiretap Lawses-® 

^^ ai j s an ^ Stored Internet Communications Would Be Covered ^ 

WASHINGTON, D,C. — Rep. Charles T. Canady (R-FL) Chairman of fee w n »<* t a- • I 

Subcommittee on the Constitution, today introduced the Eletfrnnk r - House Judiciary j 

2000. The bill would update the federal wireti laws to SS! Cornmumcahorrs Privacy Act ofj 

communications, as well as provide a«taX£lV! ? m ”‘ “ d stored e,ectronic 

addresses Canadv k * 5’! Cia re<5Uirexnents tor government tracing of e-mail 

addresses. Canady ts joined by original cosponsor Rep. Asa Hutchinson (R-AR). 

This legislation helps move our federal wiretap laws into fh* '♦let r* a # a 

said. “We have entered a new a*** w kh tur * P . m *° the iist Centur >'* Canady 
.. : wwrea a new age with the Internet, and we need a new law «* jl 

(he rapid changes in technology. While this legislation does not answer anThedmW. 
issues raised by recent technological advances it does nrnvid. r„ “ diflicult 

reforms that will - “ auces » 11 aoes provide for some reasonable 

reiorms that will protect the privacy rights of Americans ” 

Earlier this week. Rep. Canady chaired a Constitution Subcommittee hearing fin F nitrt i, * ^ 

issues raised by the FBI’s “Carnivore” program The pm a,,- a h f? ng , on Fourth Amendmcnt 

isolate, intercept and collect comm“icariS«„e 2 \ ^ developed Carnivore to 

24ft hearing featured wite«T!i r "* su ^l ec * <* WH court orders. The July 

. witnesses from law enforcement, civil liberty organisation* ««»«, 

organizations and representatives from the business community. ^ P y 

bill summary 

*« _ W* * 


— v*4u* ***v awuem axnc 

^fcchrinic c®municati^^d7l^alfy^fth»d^tMedefechw^ ■ 

simnlv arfite * 6 3 ; wwmco siorea electronic communications. The bill 

snnpiy adds electronic communications to !he previously covered wire and oral communication. 





that, tfa pen register or trap and brace device is used ft ideurify an e-mSSSs! £ 
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vjfe 31 S<>vej^aent must first demonstrate to a court that “specific and articulable facts reasonably 
crime has been, is being, or will be committed, and information likely to be obtaine 
and use [of a pen register or trap and trace device] is relevant to an mvestigati. 






Fo f * copy of Rep. Canady’s legislation (7 pages) please call Michelle Knott at (202) 225~12S2> 
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SHBWte *&' i4&$£$g ^$a§ua^. * 

^HJgro W^'-Att 5ts:«ccmly 'disposed 
Intcraec surveiltece system is iaot 
a y^'Sp^ctruin thxt&t to privacy. Federal 00 * 


S to hying to foroe a 

n ■■ . ^ 

J ytot JS authorized, whether with good inter* 

■ tions oreva, is povrerful JUw enforcement has 
: . done it repeatedly in the past, undercut ting jo 
. • sommm the assurahces.that it won't happen 
“ AadtheiimaemepwftrS 

; ^v^po^ only enhao^ t&pr^t 

' / '.TtacVwhy factions .«' dtmgeat as: ex> 

• *^*^-^®** &od .deeply conservative mem* 
i . **»of Congress, dong with the ACLU and 
:• S'®* P&m citizens, fes nervous about the 

; . oeyice. Its jeehated ability to run afoul of the 
i Toum- Ammdment’s . protections against ms.-* 

\ • reasonable searches is unmistakable. 

/ ‘ .;-Wbat this Sap 'points to-above all else is 
. that communication technology has far out- 
paced die nation's wiretap laws, some of which 

to i **£ ear5y ^ ***&*?<■ This is a 
ptoptem cmly Congress can address. To its 
credit and that of the administration, some at* 
tempts are in progress. ■ 

The adauaistration has asked that federal 
laws oa internet communications security be 
upgraded to assure that they match the kind of 
judicial and administrative restraint that al« 
t* 8 ^ ^PR?P }° phoae taps. Sen.' Patrick 
leahy, D-Vt, has writtett a bread-based In* > 
J* 0 ^ pnvacgr big, and Sea. Onin Han*. R- 
XJtah, has introduced another, somewhat nay - 

Sudr attempts, while laudable, will nor be 
**c«ia»d for months, perhaps years. Meaa- 
wd*3e, the FBI has offered to let an indepe n- * 

WiI ® 0me * but Carnivore ought to be shutderam 
. JJJj* «»th a^ ywnpletcd and 

^ entirely deprived of surveilkjwf^moues, 
out putfmg Carnivore ou hold wouldn't do 
mat. It wwtid, on the other hand, provide at 
feast some assurance to innocent parties that 

P n, ? te , ^ ves area * t op«t books. That 
could hardly be a bad thing. 

jraTflL P.02- 
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™%y or most instances these rest on a judge- 
si^d sunmillance order keyed to evidence that 
a ^ious crime is being or has been committed. 

|These are welcome assurances. But for the 
moment, that’s all they are. As one conservative 
ABbama congressman said at a Monday sub- 
c^mittee faring, *What you’re 

* , * 0 s.r,., * 

tht mb of fbe probten The ouu- 
nonsly, named Carnivore is so encompassing, w 
sophisticated, so tweakable — and its rmtet - 
workms so closely guarded that' it’s almost, 

impossible for anyone besides its .operators to 
know what it’s ready examining and realty ig-. 

This dilfcirs markedly from tetajhboe wire-'- 


.*• W,«.VUUtW4«WIJ 

■ junction box and attached connectors 

to terminals for that phone and that phone 
only. In some instances, only broo ming and 
outgoing phone numbers are registered In oth- 
ers; depending oa what a judge thinks is aeees- 
sa^y, actual conversations are recorded. 

' *. lQ a sens t, comparable service can sti2 be 
wtycied to law enforcement agencies by a cus- 
wnter s Internet service provider. It is reasona- 
1^'aKteed that only one diem’s communica- 


Carowore ts difftreot. If da service pro* 
.wdtf atfows tt to be installed, the Carnivore V 
placed drreedy ia the path of the com* 
.party s «itire Internet data flow. The filter is 
shgpored m u aailf” only what it ts sd to — for 
asoMang aikJ outgoing c-nisui wi* 
^^ es for j ust one account Or it out probe 
mo re tto ^r.But everything moves through it 

>dumf itnik a ,ut^vr.n , deals to reimies 


n ^ st comforting o^muoa we’ve 
so far came fh«n the FBl’s Marcus 
'Tftqmas, a developer of the system. Me told B» 
•Wall Street Journal that if Carnivore actu ally 
to read everything that came through, 
it .would bog Introict tramc down, to ^ d^grtc 
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7 i ?; The number of $e*ith warrants 

- v seeteig ri&ensf online data has 
soared more than m& dunngthe 
past few years, a ll^TQMf mb 

The findings, based on an ecamf* 
naoon of wanar^s served on the 
K® Net service pnwfoer, America 
Onaw, surprised federal lawmak- 
er and dvi! libertarians and 
• prompted calls lor legal reforms, 
j Searches for the Brine data typi- 
callymvolvecases ms^fiwm ha* 
rsssment and child ponwgr^tyto 
Vtoiea Clime and ted and are 
teed at discovering the identity 

andtradcfogtireaandtiesofsub- 
i scrfcere. last year, AOLwas served 
*3® 3w search warrants, up from 

33 tn 1937. This year, stare and local 
investigators haw served 191 war* 
rants trawtghjuly 17, filings show 


AOt had r® comment 

wb mat! providers fo the USA 
*«w experienced a sfenfoeata: in- 
aease fe the number of search 
giants and subpoenas* said An- 1 
drew Cresset an attorney who sp$* 
dates in comparer Saw - ■ 

Congretenal leaders informed 
of the Jmdngs s»d theywiS eam- 
ine legal standards anpfied to such 
tetn« investigations. A a mira- 
nwt House Majority leader Okie 
Amrey, R-Texas, said, police need to 
tell Congress when, why and how 
they perform electrode searches. 
The White House already has 
pledged to move soon to protect 
zteamicdstaL 

Qitks and privacy experts fear 
that etectromt survelSap^ of all 
ty^s, if iKTt^ghdy am&tfet can 
folate laws gainst mmasonaMe 
police searches. The FBft Thomas 
Gregory Motta says there is linfe 
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_ acw-Ulff 

reason far amceat^^^^- 
Sofehe says, the lafhjS 1 ^: 

*1 stored records, such as e-raaS, 
as r treats other documents, such 

as tetters and diaries, which can be 

seized ten a home with a simple 
ssardh warrant Often, though, au** 
thonoes adt for more than e-mail 
A ran dom sample of 14 such 
warrants in the past 18 mottos 
showed tod 10 ashed for all data 
ate service had on targeted sub- 
scribers. They can get a record of 
what times you dated m. where 
you dated in horn, how long you 
were online, what activities you ^ 
were engaged j& what Web sates : 
you visited, what chat sessions you 
were in and what you said there,” 
said Marie Rasch, a former federal 
prosecutor and vice president for 
cyber, law at Global Integrity in 
suburban Washington. 
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UNITED STATES DISTRICT COURT 
CENTRAL DISTRICT C t CALIFORNIA - WESTERN DIVISION 


IN THE MATTER OF THE 
APPLICATION OF THE UNITED 
STATES 0“ AMERICA FOR AN 
ORDER AUTHORIZING THE 
INSTALLATION OF A PEN 
REGISTER AND TRAP ’ND TRACE 
DEVICE . 


Criminal No. SS-2TI3M 


) ORDER: U) DENYING MOTION TO QUASH 
) ORDER AUTHORIZING PEN REGISTER; ANY 
) (25 GRANTING APPLICATION TO EXTEND 
J ORDER AUTHORIZING PEN REGISTER 


This case raises the question whether this court has th* j 
1? j legal authority under the pet. register statute, IS O.S.C. g 3122, ex | 

IS naq., to issue an order requiring an internet service provider (ISP) I 

IS; to install a device which captures the time, date, source and i 

20 destination addressing information of electronic mail (e-mail) j 

21 messages sent to and from an e-mail address maintained by a customer 

22 at the IS?. After consideration, the court finds that it has the ! 

23 | legai authority under tna pen register statute to issue such an c‘ r ce-' ^ 

i " ' t 

^ The discussion ot this issue arises in the context of an j 

25 I ongoing criminal investigation. The court dose not want to compromise j 
2S the integrity of that criminal investigation. Accordingly, the 
2? description of the facts out of which the current dispute arises j 

28 1 deliberately omits factual Information which could alert the subject | 
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or subj ecte of the invest: igation to the existence of arid the 
techniques used in the investigation. 

On December 2, 19*9, the government, through an Assistant 
United States Attorney, presented to the court an ex parte application 
for the issuance of an order in the nature of a pen register. The 
application contained information that a federal criminal 
investigatory agency was seeking to locate a federal fugitive, that 
agents 0 f the federal agency believed that the fugitive was 
maintaining contact with a specific named close friend or relative 
("the subject"] by means of e-mail transmissions sent to the subject, 
ana that the subject maintained an Internet service account with a 
designated Internet service provider {"ISP") under the subject's name. 
This court issued an order providing that the government agency -may 


nscs..^l d. p$sn t’&&3.bz&z z rs^ 


race device co register time, 


date, and source and destination addressing informat lots of the 
electronic mail messages sent to and from the subject Internet 
account, including information, regarding the true source of the 
messages without geographic limitation." 

The government agency served the order on the ISP. The ISP 
and the government had some initial discussion regarding the order. 
Eventually, the isp attempted to comply with the order by providing 
the agency with the "headers’" {minus the subject or regarding line) of 
numerous incoming messages to the subject's e-mail account and the 
headers" of a few outgoing messages (with the subject or regarding 
information deleted) from the subject account. The government is not 
satisfied with this response, contending that the terms of the order 
entitle it to install its own device on the premises of the jgp 
connected to ISP's equipment. 
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1 j> ae a result of this dispute, the IS? has now moved to quash 

2 \ or modify the order. The government has opposed the motion to quash 

3 and separately submitted an. ex parte application requesting an 
<! extension of the court's previous order. 

5 At an initial scheduling conference, the parties represented 

6 t that the court's original Order, issued December 2 , 1999, would expire 
?!; February 4, 2000 . This court scheduled a hearing on the ISP's motion 

to quash or modify the order on February 4, 2000. It now appears to 

i 

$[ the court: that: the order has already expired, the statute provides 
10 I chat tho court may issue an order authorising the installation of a 
111 oen register M for & Deriod not to exceed SO days,* 18 W*3.C* § 

12 I 3123(c) (1) , The Order was issued on December 2 t X Pursuant to 

13 | the terras of the statute/ the order expired £0 days thereafter on 

14 I w &nua r y 3 1 «. 30 00. 

15 | There is no presently effective order in plane which this 

| court may quash. The court therefore denies the ISP's notion to quash 

I 

17 i as moot, 

I ... 

18 a Although that ruling resolves the ponding motion of the ISP 

18 ;! to quaah, it does not resolve the underlying issue whether the court 

20 ; has the authority to issue an. order. That issue is now presented to 

21 the court because the court must decide the government's application 

22 I to extend the order . 

23 i The statute provides that; 

24 j “the court shall enter an ex parte order authorizing 

as | the installation and use of a pen register or a trap and 

' : 

26 I trace device within the jurisdiction of the court if the 

27 court finds that the attorney for the Government or the 

26 1 State law enforcement or investigative officer has certified 

3 
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to court that cho information likely co be obtained by 
sucn i^staj-lation and use is relevant to an ongoing criminal 
invest ic&tlon . « 

18 XJ.8.C. § 3123(a) . 

The government has certified to the court that the 
information likely to be obtained by the pen register or trap and 
k-racs device is relevant to an ongoing criminal investigation. This 
court accordingly has authority to issue a proper pen register or tree 
and trace order. The question presented here is whether the device 
which the government seeks to install is a device described and 
authorized in the statute. 

The statute defines a "pen register" as • 

"a device which records or decodes electronic or other 
impulses which identify the numbers dialed or otherwise 
transmitted on the telephone line to which such device is 
attached . . , 

18 t\S.C, § 3127(3}. 

The statute describes a "trap and trace device* agj 
"a device which captures ths inccraing electronic or other 
impulses which identify the originating number of an 
instrument or device from which a wire or electronic 
communication was transmitted, " 

18 U.S.C. § 3127 ($) , 

It is apparent that a pen register, as defined in the 
statute, is intended to be a device which captures the telephone 
numbers dialed by a target phone, h trap and trace device is intended 
to capture the telephone numbers of telephones which make calls to a 
target phone. It is also fairly clear that the drafters of the pen 

4 
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register statute did not contemplate that the statute would be used to 
authorize the issuance of court orders to capture the e-mail addresses 
of persons sending e-mail to and receiving e-mail from a targeted e- 

j 

mail address . 

The statutory definition of a pen register describes a 
device attached to a telephone line, 28 U.S.C. f 3127(3} . The 
statutory definition of a "trap and trace device" does not limit the 
description to & device attached to a telephone line. 28 U.S.C. S 
3127 {4} » "Konsthaless, it appears from the construction cf related 
sections of the statutes governing trap and trace devices that they 
include only devices that ere attached to a telephone line." Tn thia 



devices must include * the number and, if known, physical location of 


the telephone line to which the pen register or trap ana trace device j 
is to be attached . . . ,* is U.S.C. § 3123(b)(1)(C). j 

It is clear that the government here does not intend to 
attach either a conventional pen register or a trap and trace device 
to the subject's telephone line. The government's opposition to the 
ISP’s motion to quash contains & description by a technician declarant 
of how the government intends to implement the requested order. The 
government would install a computer program called "Carnivore* on the 
ISP's network, probably on a "router" used by the IS?. A "router 1 ' is 
described as a transmission device that processes paeketized network 
information . Both the router and the is?' s network are connected to 
the telephone lines and transmit paeketized network information over 

5 
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if telephone lines. Th& Carnivore software program would look for the 

2 ! target's loo -in name (presumably for outgoing e-mail ! or the target's 

3 ] electronic nys.il name (presumably for incoming e-mail} . The program 

4! would then capture the "header* information associated with the e-mail 
sj message, including the time, date, and addressing information, 

S,j including Internet identity, for messages sent to or from the target 
7 I account. The pregram would not capture the subject or regarding line 
8;! of the e-mail message or the content of the message. The captured 
s ] material would be stored on a government computer which presumably 
10 i would be attached to the IS?' s router. 

11 f A conventional pen register is attached to telephone lines 

12 f and captures the telephone number dialed by the target telephone, A 

13 | trap and trace device is attached to telephone lines and captures! the 

14 j telephone numbers calling the subject telephone. Here, the 

15 1 government's reguested device is a computer and software program 

[t 

16 ! attached to the ISP's equipment which is, in turn* connect ed to 

! 

I? telephone lines and which captures the Internet e-mail addressee of 
is | persons sending to or receiving e-mail from the target. There appears 

15 1 to be no significant difference between capturing telephone numbers 

20 with a pen register or trap and trace device and capturing e-mail 

21 addresses with the government's proposed computer and software 


22 1 program, 


This court acknowledges that the pen register statute, 18 


24 | v.S.C. § 3122 » m is contained in Title III of the Federal 

25 j Electronic Communications Privacy Act of 1986 1 that one of the evident 

26 | purposes of that statute is to regulate government intrusion into 
27 1 private communications, and that the statute should be strictly 


ZB 1 construed, Ic-Xibl 


88$ F- Supp« at 20D. This 


SDiiio mmm m 


5/24/02 Release ■ Pa^e S$ 5 

ma m m xm iohx m/uao 


m*trO(J(FRi| 09:35 ESU 


TEL i 7032 J532 v 


P. DOS 


court finds that the intrusion into otherwise private activity which 
would be allowed by the issuance of the government's requested order 
is no greater than the intrusion created by the issuance of a 
conventional pen register order- Although apparently not contemplated 
by the drafters of the original statute* the use of a pen register 
order in the present situation is compatible with the tents of eke 
statute* Accordingly, the court will grant the government's 
application for the continued use of a pen register and issue an 


appropriate ordes 


oriel ns 


;he reasons seated above , the ISP's motion to quash the 
authorising the installation of a sen register is 


denied as moot. The government* s application for the continued use of 



7 
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I nvestigative Services Division 
Electronic Surveillance Unit 
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UNITED STATES MARSHALS SERVICE 

Office of tire Assistant Director for Investigative Services 
600 Army Navy Drive 
Suite 1200 - Crystal Square 4 
Arlington, VA 22202 
Phone: (202) 507-9110 
FAX: (202) 307-8233 or (202) 307-9337 
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DECIARATION 

I Edward Kill hereby declare as follows : 

1, 1 art; a Special Agent with Che Federal Bureau of 
Investigation, and have been an' Agent for ID years. 1 specialize 
in technical equipment, including electronic surveillance 
equipment . I am familiar with the Internet and with surveillance 

devices used for the internet. 

2 , if authorised by this court, i or other technicians 
intend to install a program called Carnivore to obtain the 
information sought in this order. The program will be installed 
©n Karthl/ink’s network, most likely on a "router B used by 
Earthi-ink . A "router” is a transmission device that processes 
packet ised network information, Both the router and EarthLink 1 e 
network are connected to the telephone lines end transmit 
packet ised network information over the telephone lines. Ch© 
Carnivore software program watches the incoming telephone traffic 
to EarthLink and looks for the targeted subscriber's log-an name 

i 0 r electronic mail account name. If it finds the target's log-in 
I n&me, the program follows the target while the target as on line. 
The program then captures only tha header information for 
electronic mail messages sent or received fey the target while the 
target is on line. If the program finds the target's electronic 
! nail account name, it will capture the header information 
associated with that electronic mil message. Specif ieally, tha 
1 program will capture the time* &Ets> and tha Redressing 
inf ormation Internet identity) f&r electronic m&xl 

| messages sent to or from, the account < The program will not 
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capture the subject or regarding line on the electronic mail 
message/ nor dose it capture the content of the message or any 
information concerning the target's other ©n line activity. 

3. Although the program is capable of capturing more than 
the information authorized under the order, I or the installing 
technicians will configure the program in a manner that will 
prevent the program from capturing any information that is not 
authorized under the order. In addition, the computer used to 
run the program has limited memory capacity and limited ability 


ID I to process information. Because of these limitations the 



computer used to run the program would be overloaded within a few 
minutes if it attempted to collect all of the information, on 
Earthlink's 8 to 1C million e-mail messages. Moreover, the 
program will be installed on a particular entry point into 
Earthlink's network, and as such would not have access to all cf 
Earthlink 1 e customers. 

4. the program, should not create a security risk for 
Earthlink. Although the Carnivore program is remotely 


19:1 accessible, it has several security provisions that prevent an 

20 • intruder from obtaining unauthorised access to Earthlink' s 

21 { system, svsn if an intruder did obtain such access, the program 

22 lacks a TCP/IP protocol stack, which means that the intruder 

23 i would be unable to communicate With Earthlink's eye tern from the 

24 government's computer. I and other agents with whom 1 work have 

25 Installed this program at many other service providers (including 

26 AT&T} and have not had security problems or objections from the 

27 : providers. 

28 25 
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From: \ WKKKtttm' ' ^ 

to; iDwOTTspiKe 

Oats: ; . ~ 4/5/00 S:2SPM ■ ~ . ;. ' \ '■ X 

Subject: •' 

j just receded a call fronflMIBs OIPR: Tq state tftat Shifts unhappy. wfthlTOS and the 
UBLUnitwsufelbean un^Sa^MMinSw^ ftfopoftpcwis, • j'wiltiy Jo relate thinks has 

happened with, the above earned FISA. • • • . '■ . . 


MMlsecured an Et-SUR FlSAjvery quickly' 6Wmm the request of _ 
that sne was assured’ that the FBI had special softwarelwHibh cpulddo w 
fectJBBBstates that the technical people In Quantico- approved the FISA language. 


ra'Tiiir-ssfclEElFfH 


coulcTdo. In 


The FBI technical people went to install the FBI software ; 
electronic surveiiisnce on March 1$; 


accomplish the 


The software was turned ©hand did not work correciiy^The FBf software not only picked up the E-Mails 
under the electronic surveillance of the FBI’® targei,*|PJ^ bid disc picked up E-Mails on non-covered 
targets. The FBI t echnical p erson was apparently soTTpsst'that ha di$troye^inh^-M^l take, including 
the' take oni®^||ijHBJiC'U.ndef the impression . that ho one from the FS^HHJBwas present to 
supervise theFSHecrpcal person at the time. Now the FBI tec^ie^fj^ojMew««WT8lnt new software 
experiment at the carrier to see if it works. " - • ■ ■ • ' • ; .■ ' ' • 

MHktates that 'OIPR was . never told thst the FBI software was experimental OIPR was informed that it 
woodwork. - The FBI technical people are still trying to make it Work IngHMV, and want to resume the 
electronic surveillance. The FBI people in pttM^also want a physical search warrant to pick up the 
E-Mails from the carrier, which the FBI picked upon the target, but destroyed. 

Hft informed me that the FBI does not have the auihohty to resume electronic surveillance until she 
receives a written explanation of what has happened and s'heSiss something with the court. Obviously, 
she has no intention of securing a search warrant either unfel. this is straightened out. 

When you arid this story to the 'prepared to go to the field, and 

which is in NSLU for signature before it goeis *4NNHMP®^ hfi> Signature, you have a pattern of 
occurfehces which Indicate to OIPR an inability ori-the pert of the FBI to menage its FISAs. 

HMHH'andHHHbleese see me ASAP. 


/ Xf$ 
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DITU Legal issues 


Date: 

Subject: 


Tue, Apr 11,2000 9:00 AM 
DITU Legal Issues 


The attached sets out a few Issues we would like to discuss with you so that we can work toward 
providing a reasonalbe and practical guideline to personnel in our Unit and the Field. 


My number is 703| 


I will bo on leave from Thursday through next Tuesday. 
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The following sets out some of the legal issues facing DITU 
as well as some thoughts on ways to proceed. We need your legal 
guidance in this matter to formulate a reasonable and prudent 
course of action, as well as a practical working guide for the 
personnel of DITU and the Field Office personnel involved in Data 
Intercepts* I am sure there are other issues and ideas, but this 
may be a good start. Call me to discuss this in more detail. I 
am willing to travel to your office at FBIKQ or to meet with you 
here at QT , If you n eed any clarificat ion o f technica l concepts 
et c, you ma y call 703 -VMHMNBor SSA 


at 


'UJ 



To initiate an intercept on a network or at an ISP, the DITU 
installs a collection device with appropriate filters set to 
capture data within the scope of the Court Order or the effective 
consent of a consenting party. This filtering process, a 
component of Ether peek and Carnivore, filters based on TCP/IP 
standards. On occasion we encounter non-standard implementation 
of transmission control and Internet protocols within a network 
or at an ISP. Encountering non-standard implementation has led 
to inadvertently capturing and processing data outside the Order 
or Consent . 

Issue I 

In instances where we encounter non-standard implementation 
of a protocol which leads to the improper capture of data, two 
main concerns arise. The first, and of most immediate concern, 

Is the formulation of a guideline to be followed in resolving the 
matter* This guideline should extend from the DITU personnel who 
installed and likely discovered the error, through DITU 
Management representatives. Field Division Case Agents, CDCs, 
notifications to AUSAs , Motions to Seal* etc. 

Issue II 


The second issue, critical in efforts to intercept the data 
under the Court's Order or under consent from a test account, is 
how FBI technical personnel, such as, Engineers, Computer 
Programmers and others, may lawful examine the collected data foi 
the sole purpose of determining why the filters failed and what 
software changes need to be made to bring the collection in line 
with the scope of the existing Order. We need to look at the 
data to figure out what is wrong and how to fix it Hi 
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Issue III 

A third issue which we would like you to consider is that we 
frequently set up user accounts on networks and install data 
intercept devices to perform a "test tap" under our own consent. 
This is generally done as a means of verifying that the location 
on the network and the filter set would be appropriate for an 
anticipated or existing intercept Order. In the event that we 
are doing a "test tap" under consent, looking for our own mail, 
etc, and inadvertently capture something outside our consent, 
such as another persons mail, what are our options? Is it a 
violation of Till if the interception is not intentional and we 
do not disclose or endeavor to disclose the information to 
anyone? May we destroy the information and simply not disclose 
it to anyone? 


Issue IV 

Random Access Memory RAM 


In relation to the "testing" of network placement and 
filters, it is generally a technical requirement to install the 
device with appropriate filters set and initiate the capture 
process. It may be hours or days before a determination can be 
made as to the functional operation of the collection. During 
these first few hours or days, the technical representatives of 
the FBI, Electrical Engineers, Electronics Engineers, Technically 
Trained Special Agents and others may frequently examine 
collected data to determine the efficacy of the installation. In 
relation to the time period from installation to the verification 
of proper function, the following question is posed for your 
consideration. Is there a significant legal difference between 
Random Access Memory (RAM) , that which is not retained when power 
is removed, and of a hard-drive or floppy disk which retains the 
data. The thought process here in the DXTU being that; during 
the period of time from the installation to the verification of 
proper function, • the data could be directed to remain in RAM and 
not be forwarded to a permanent media. Technical representatives 
could then examine the collected data for proper filtering and 
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assure that the collection is operating within the scope of the 
Order. 

If the collection appears technically correct, it could then 
be re-directed from RAM to permanent media and the intercept 
initiated. If not, the data could be examined in RAM by Computer 
Programmers/Engineers to determine a filtering change or software 
patch necessary to effect the Court Ordered intercept. The data 
in RAM would not be retained by the computer on power-off. 

By directing collected data to remain only in RAM, we may 
gain both the ability to troubleshoot installations and to assure 
that the data is not written to "storage media" nor recoverable 
from any media. 
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To: 

Date: 

S object: 


THOMAS, MARCUS C 


t 2000 5:53 PM 


ISP INTERCEPTS E-MAIL 


See the attached. After you all get a chance to review my initial thoughts regarding your questions/issues, 
lets then plan to sit down and talk. 
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4/12/2000 


TO: Marcus Thomas 


FROM HB 

RE: Intemet/E'Mail Intercepts 

This is in response of 4/3 3 regarding the captioned matter. I 

The following are some preliminary reactions and thoughts. They are not necessarily final legal 
answers or guidance. They are offered to stimu late further consideration on all of our parts. As 
was suggested in the E-mail, we all need to sit down in the very near future and take a little time 
to talk about our intercept approaches, as well as what we must do when they unintentionally go 
astray. 

Background : 

We need to start with a few high-level and familiar thoughts, because they form a background and 
context for the subsequent discussion. As we are all aware and appreciate, electronic surveillance 
is a very sensitive investigative (and intelljgence/counterintelligence} technique,’ As such, for 
over 30 years, it has been carefully regulated by and tluough statutory regimes at both the Federal 
and State levels — which regimes, in many instances, contain provisions that arc very specific, and 
which contain dictates that are quite detailed in their procedural/administrative aspects. On its 
face, the language of these regimes, as written by the Congress, is essentially black and white, and 
generally is unforgiving: one complies with the statutes or, alternatively, violates them. In 
enacting these regimes. Congress sought to balance and advance privacy and effective law 
enforcement. Moreover, given the sensitivity of this technique, electronic surveillance has been 
the subject of on-going scrutiny by Congressional oversight committees, the press, privacy 
groups, and the public. In short, there are few, if any, investigative techniques that are (and have 
been) subjected to such heightened scrutiny. And there are few, if any, investigative techniques 
that gamer (and have garnered in the past) such vehement criticism when errant surveillances or 
missteps (be they intentional or unintentional) occur. 

While, as noted above, the electronic surveillance laws are often specific and detailed in their 
provisions, general ly they do not address the precise aspects of how, technical speaking, the 
“intercept” is to occur. Congress eschewed doing so because it would be a bad idea to tty to 
delineate all the various potential interception methodologies/approaches. To do so would 
infringe upon Executive Branch prerogatives in “executing” the laws. And, it would get into 
sensitive intercept sources and methods, etc. Nevertheless, both the Congress and the courts have 

1 While we in our particular area of law enforcement are so close to thi s matter that we 
literally live and breathe electronic surveillance, to others (especially those outside of law 
enforcement), any electronic surveillance is a big thing! 
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an extremely keen interest in making sure that several things are being attended to by the 
Executive Branch in conducting electronic surveillance searches and seizures: (1) that illegal, 
unconstitutional searches are not occurring (i.e., that no searches of persons* communications are 
occurring without probable cause/warrant/emergency); and (2) that the spirit/intent/letter of the 
electronic surveillance laws (as implemented of constitutional law - at least to a degree) are 
being carried out carefully and judiciously. One aspect of this involves the requirement that such 
surveillances only be approved with high-level departmental approval and with on-going 
Departmental legal/administrative oversight. 

Interceptions of the “Older” Communications Technology 

It is probably fair to say that, historically. Congress has been of the opinion (and correctly so) 
that, for Jaw enforcement, effecting a lawful interception was not a particularly problematic 
endeavor. Typical wire line sen-ice lent itself to reasonably easy segregat ion of a target’s 
communications to the target line, 2 and thus to concomitantly effecting lawful (and effective 
technically-targeted) interceptions. With other identifiers (ESNs, MINs, Cap Codes, etc,) being 
available, accurately targeted interceptions of cellular phones and pagers could likewise be 
effected by law enforcement. Importantly, Congress understood that, in order to effect accurate 
interceptions, law enforcement would seek and obtain assistance from electronic communication 
service providers (BCSPs) and/or others to properly conduct the intercept (“...upon request [of an 
ECSP, it shall] furnish the applicant forthwith all information, facilities, and technical assistance 
necessary' to accomplish the interception ... with a minimum of interference with the sendees [the 
ECSP is according to] the person whose communications are to be intercepted”). 251 8 U.S.C. 
2518(4). Until 1994 (see below), there is no clear indication, in the statutes or otherwise, that 
Congress ever understood interception accuracy to be an issue for law enforcement. 

Where potential “over-acquisitions” could arise. Congress, privacy groups, and others have 
homed in and taken an interest. For example, with regard to pen register/DNRs, Congress and 
others have been concerned about certain (but not all) post cut-through dialing - i.e., certain 
dialing that arguably constitutes a substantive communication - even though related to the target 
individual (as opposed to communications of others). In this regard, Congress, as part of the 
CALEA legislation, specified in 18 U.S.C. 3121(c) that law enforcement “shall use technology 
reasonably available to it that restricts the recording or decoding of electronic or o ther impulses to 
the dialing or signaling information utilized in call processing.” Similarly, under CALEA’ s 
assistance capability requirements. Congress specified, as a statutory requirement as part of the 
interceptionpapabiljty , that telecommunications carriers meet their obligation “in a manner that 


? One possible exception being “party-line” service, which by now is pretty rare. Its 
unclear exactly what Congress would think about such party-line-related intercepts. Presumably, 
minimization could be employed to parse the target subscriber’s calls. But, at the end of day, 
under the statu tory regime/language, the telephonic communications being targeted for 
interception would, in fact, be occurring over the properly-targeted telephone line/facilitv . Here, 
law enforcement would, at least, be on the correct line/facility that had been authorized for 
interception by the court. 

2 
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protects ... the privacy and security of communications and call-identifying information not 
authorized to be intercepted.../’ 47 U.S.C. 1002(a)(4)(A). 

Internet and E-mail Sendee Providers 


Both Internet Service Providers (ISPs) and E-mail service providers are comprehended within the 
term “providers of ‘electronic communication service”' under the ECPA and Title III/FISA. See, 
e.g., 1 8 U.S.C. 2510(15). Moreover, certain facets of E-mail/ISP service, at least with regard to 
the acts of transmitting and routing wire/electronic communications, can also constitute activity of 
a telecommunications earner,’ thereby subjecting the communications/carrier to the provisions 
ofCALEA, See 47 U.S.C. 1001(B). Accordingly, certainly under the ECP A/Title III/FISA (and 
perhaps under CALEA), such electronic communication sendee providers are mandated to afford 
all the necessary assistance to properly effectuate an interception of electronic communications. 
Consequently, whenever there is an electronic surveillance order, and whenever there are any 
questions about “standard/non-standard transmission controi(s),” “protocols,” or any other 
technical Information matter of consequence in properly and accurately effecting electronic 
surveillance, these sendee providers are duty-bound to work with us in properly and lawfully 
effecting the surveillance order. 


Internet/E-mail Interceptions 

In the referenced DITU E-mail, it is explained that certain Etherpeek and Carnivore "filters” are 
utilized to (hopefully) capture data (and only that data) authorized for interception in an electronic 
surveillance order or pursuant to consent. The E-mail mentions that, on occasion, when non- 
standard implementations have been encountered, data outside the court order or consent have 
been captured and processed inadvertently. DITU then presents several issues for examination. In 
the tust two, DITU (1) seeks guidance as to formulating guidelines for reacting to such 
Inadvertent interceptions and (2 ) whether additional examination of such non-authorized data is 
permitted to remedy the errant collecnoaTIitering efforts. 

As noted in the background comments, the electronic surveillance statutes speak at a rather high 
level, and are essentially black and white in nature — with one either complying with the law or 
facially violating it. The Title III statutes, generally speaking, are not “specific intent” statutes. 
That is, one does not need to have special or particular bad intention o r motive to facially violate 
the law. Further, since the protection of personal communications privacy is a key facet of the 
statutory purpose and regime, any unauthorized in terception of another’s communications is a 
matter of concern (at a minimum). Indeed, some might argue that the government’s unauthorized 
interception of such communications is even more problematic. 

Historically, as a matter of Departmental practiee/policy, unauthorized interceptions (be they of 
the subject of the interception or others) have been taken seriously by DOJ (and by the FBI for 
that matter). When detected, DOJ has advised AUSAs to (1) file a pleading with the court 
explaining the unintentional/intentional act and to (2) seal the unauthorized intercepted 
communications with the court, in order to prevent further harm such as subsequent use or 

(see IB U.S.C. 251 l(l)(c)(d), 2515). Such unauthorized interceptions not only can 
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violate a citizen’s privacy but also can seriously “contaminate" ongoing investigations. In 
addition, DOJ could also counsel the AUSA to recommend/not recommend to the court whether 
or not the person(s) who communications were improperly intercepted should be notified. 

Interestingly, under Section 251 l(2}(a)(ii), while Title HI specifies that “no [criminal] cause of 
action shall lie in any court against any provider of wire or electronic comm unication service, its 
officers, employees, or agents, landlord, custodian, or other specified person for providing 
information, facilities, or assistance in accordance with the terms of a court order or certification 
[under Title III]," there is no similar explicit protection for law enforcement personnel under this 
provision. Now, practically speaking, there is virtually no chance that law enforcement officers 
acting in good faith, pursuant to a court order, are going to be criminally prosecuted (or even 
investigated)! As to civil liability, under 1 8 U.S.C. 2520(d), Title HI states that “a good faith 
reliance on . .. a court warrant or order, a grand Jury subpoena, a legislative authorization, or a 
statutory' authorization... is a complete defense against any civil or criminal action brought under 
[Title HI] or any other law." So, here too, law enforcement personnel should be immune, 
practically speaking, from any liability. (Further, even if (in a semi-egregious case) liability were 
to be found, it would almost certainly fall to the agency — not the agent/support personnel.) 
However, the FBI itself routinely does conduct OPR-type inquiries, from an administrati ve 
perspective, in order to determine the nature/cause, etc, of any investigative missteps or errors 
which facially violate a law, with an eye toward preventing future reoccurrences, etc. 

In a similar fashion, missteps under FISA lead to mandatory reporting to the President’s Foreign 
Intelligence Advisory Board (PFIAB), and such errancies must be reported/explained/justified to 
Congress. 

Issue #1 : 

In short, then, as to the first issue, upon detecting an inadvertent, unauthorized (unlawful) 
interception; 

A) the technical effort that is causing the mistake should be stopped immediately (and not re- 
instituted until advised to do so by the supervising attorneys); 

B) the error should be reported immediately to the FBI substantive ease personnel in the 
field/headquarters (as appropriate), to the field office TA and CDC, and to the respective 
AUSA/OIPR supervisory attorney (who, in turn, will presumably advise the court); 

C) the reporting as to the errant interception should be careful and clear so that those to whom it 
is reported will folly understand what happened; the reporting should not include any 

substantive aspect of the content of the communication that may have been gleaned; and 

D) the unauthorized intercepted material should be segregated immediately as a prelude to formal 
sealing with the court. 

Issue #2: 


As to “examining" the unauthorized intercepted data (albeit for the sole purpose of determining 
why the filters failed and what changes need to be made), this is a very delicate and potentially 
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problematic area. It would appear that continuing to look at (examine and “use”) the substantive 
content/plain text of the material that was not authorized for interception would most aggravate 
Title Ill’s concerns/ dictates (see Sections 251 1 and 2515), and most likely would heighten the 
legal problem in the minds of the Department, FBI-OPR, the court, Congress, privacy groups, the 
public, etc. I f, on the other hand, there is some way of looking at the signaling, programing, 
protocols, etc. hi a raw/uninteliigihle state (lean amplify later), this might be okay if (1) it is for 
the sole purpose of determining why the filters failed and what changes need to be made, and i f 
(2) it is approved by the AUSA/OIPR (and/or the court if the AUSA/GIPR believe warranted - 
such court permission in this area would presumably be preferable from the perspective of legal 
protection for our technical people). Another thought I would strongly encourage is to engage the 
ISP. That is, if there is a technical (filter) failure problem regarding the interception, it would 
appear to be much much more preferable for the ISP to try to fix it (even with us coaching and/ or 
guiding technically from afar). The reason for fully utilizing the ISP is the existing mandate for 
their assistance, etc. under the law, and because of the “cover" it affords us legally, politically, 
and perceptionaliy. 


Issue U 3: 


D1TU poses a similar issue as to one its own “test” accounts where an inadvertent, unauthorized 
interception occurs. Again, we have to be very careful here, even where “testing" is our activity, 
because the potential harm/violation of pri vacy is arguably the same. Somehow, when we test, 
we have to go out of our way to avoid tripping over innocent third party communications. I am 
not sure how we can proceed to test without inadvertently intercepting the- communications of 
others, but we really need to try. Perhaps, we can explain our testing requirement to the ISP and 
get them to test our filters, etc. for us, since it is their network, and since they administrate it, etc, 
anyway. I would really encourage using the ISPs for many reasons, not the least of which is to 
make them aware of us popping around in their network to conduct testing, etc. 


Issue #4 : 

DITU asks whether interception collections effected in Random Access Memory (RAM) (rather 
than permanent media) make any significant legal difference. In short, I would say probably not 
as a purely legal matter, inasmuch as an unauthorized interception is, after all, an unauthorized 
interception. How, having said that, it may make some feel better that the potential for ongoing 
“use" and “disclosure”(through some permanent storage media) may be somewhat reduced - but I 
don’t think this is the path to take. As alluded to above, I would opt for more controlled testing 
and utilizing sendee providers as much as possible to create some insulation between us and the 
subscriber public where inadvertent interceptions might arise in the course of our trying out our 
filters, etc. 
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FBI Using Internet Wiretap System (washingtonpost.com) 

By John Schwartz 
Washington Post Staff Writer 
Tuesday, July 1 I , 2000; Page A1 

The FBI has deployed an automated system to wiretap the Internet, giving 
authorities anew tool to police cyberspace but drawing concerns among 
civil libertarians and privacy advocates about how it might be used. 

The new computer system, dubbed "Carnivore” inside the FBI because it 
rapidly finds the "meat” in vast amount s of data, was developed at FBI 
computer labs in Quanttco, Va., and has been used in fewer than 50 cases 
so far. 

But that number is sure to rise, said Marc us Tho mas, chief of the FBI’s 
cyber-technology section at Quantico. ”In criminal situations there’s not 
yet been a large cal! for it," he said, but the bureau already has seen 
"growth in the rate of requests.” 

Civil liberties groups said the new system raises troubling issues about 
what constitutes a reasonable search and seizure of electronic data. In 
sniffing out potential criminal conduct, the new technology also could 
scan private information about legal activities. 

' it goes to the heart of how the Fourth Amendment and the federal wiretap 
statute are going to be applied in the Internet age," said Marc Rotenberg, 
head of the Washington-based Electronic Privacy Information Center. ' 

The new system, which operates on off-the-shelf personal computers, takes 
advantage of one of the fundamental principles of the Internet; that 
virtually all such communications are broken up into "packets,” or uniform 
chunks of data. Computers on the Internet break up e-mail messages. World 
Wide W'eb site traffic and other information into pieces and route the 
packets across the global network, where they are reassembled on the other 
end. 

FBI programmers devised a "packet sniffer" system that can analyze data 
flowing through computer networks to determine whether it is part of an 
e-mail message or some other piece of Web traffic. 

The ability to distinguish between packets allows law enforcement 
officials to tailor their searches so that, for example, they can examine 
e-mail but leave alone a suspect’s online shopping activities. The system 
could be tuned to do as little as monitoring how many e-mail messages the 
suspect sends and to whom they are addressed u the equivalent of a 
telephone "pen register," which takes down telephone numbers being called 
without grabbing the content of those calls. 

"That's the good news,” said James Dempsey, an analyst with the Center for 
Democracy and Technology, a Washington high-tech policy group. "It is a 
more discriminating device" than a full wiretap, he said. 

But Dempsey expressed worries about the new system, which would be 
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from pen-register data to Ml wiretaps with court authorization, "It’s 
not an increase in our authority; it doesn't present a change of volume in 
what we do," he said, 
r- 2000 The Washington Post Company 
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FBI e-mail Snooping Device Attacked 


July 11,2000 

Filed at 7:26 p.ra. EDT 
By The Associated Press 

WASHINGTON (APj — C nil liberties and privacy groups railed Tuesday 
against a new system designed to allow law enforcement agents to 
intercept and analyze huge amounts of e-mail in connection with an 
investigation. 

The system, called "Carnivore," was first hinted at on April 6 in 
testimony to a House subcommittee. Now the FBI has it in use. 

When Carnivore is placed at an Internet Service Provider, it scans all 
incoming and outgoing e-mails for messages associated with the target 
of a criminal probe. 

In a letter addressed to two members of the House subcommittee that 
deals with Fourth Amendment search-and -seizure issues, the American 
Civil Liberties Union argued that the system breaches the Internet 
pro vider's rights and the rights of all its customers by reading both 
sender and recipient addresses, as well as subject lines of e-mails, 
to decide whether to make a copy of the entire message. 

Further, while the system k plugged into the Internet provider's 
systems, it is controlled solely by the law enforcement agency. In a 
traditional wiretap, the tap :s physically placed and maintained by 
the telephone company. 

"Carnivore is roughly equivalent to a wiretap capable of accessing 
the contents of the conversations of all of the phone company's 
customers, with the ’assurance* that the FBI will record only 
conversations of the specified target," read the letter. "This 
'trust us, we are the government' approach Is the antithesis of the 
procedures required under our wiretapping laws." 

Batty Steinhardt, associate director of the ACLU, said citizens 
shouldn't trust that such a sweeping data-tap will only be used 
against criminal suspects. And even then, he said, the data mined by 
Carnivore, particularly subject lines, is already intrusive. 

"Law enforcement should be prohibited from installing any device that 
allows them to intercept communications from persons other than the 
target,” Steinhardt said in an interview. "When conducting these 
kinds of investigations, the information should be restricted to only 
addressing information." 

A spokeswoman for Rep. Charles T. Canady, R-Fla., who heads the 
Constitution subcommittee, said that the congressman had no immediate 
comment on the Setter. 

In testimony to Canady's subcommittee, Robert Cora-Revere, a lawyer at 
the Hogan & Hartson law firm in Washington, said that he represented 
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an Internet provider that refused to install the Carnivore system. The 
provider was placed in an “awkward position," Com-Revere said, 
because the company feared suits from customers unhappy with the 
government looking in to all the e-mail. 

“It was acknowledged (by the government) that Carnivore would enable 
remote access to the ISP’s network and would be under the exclusive 
control of government agents," Com-Revere said, 

Com-Revere told the committee that current law is insufficient to 
deal with Carnivore's potential and that the Internet provider lost 
their court battle in part because of the Internet’s connection to 
telephone lines, and that the law was stretched to cover the Internet 
as well. 

Com-Revere would not reveal the name of his client, and the client 
lost the case. He said that the FBI has been using Carnivore since 
early this year. 

James X. Dempsey, senior staff counsel at die Center for Democracy and 
Technology, said that the main problem with Carnivore is it’s mystery. 

“The FBI is placing a black box inside the computer network of an 
ISP," Dempsey said. “Not even the ISP knows exactly what that gizmo 
is doing." 

But Dempsey said that Internet providers contributed to the problem, 
by saying that current technology does not allow the Internet provider 
to sort out exactly what the government is entitled to get under a 
search warrant. The carriers complained that they had to give 
everything to the FBI. 

“The service providers said they didn't know how to comply with court 
orders," Dempsey said. “By taking that position, they have hurt 
themselves, putting themselves into a box," 

Marcus Thomas, who heads the FBI’s Cyber Technology Section, told the 
Wall Street journal that the bureau has about 20 Carnivore systems, 
which are PCs with proprietary software. He said Carnivore meets 
current wiretapping laws, but is designed to keep up with the 
Internet. 

“This is just a specialized snifter," Thomas told the Journal, which 
first reported details about Carnivore. 

Encrypted e-mail, done with an e-mail encoding program like POP, still 
stays in code on Carnivore, and it's up to agents to decode it. 

Dempsey has a possible solution to the problem, though one that’s 
probably unlikely — show everyone what it does and how it does it, 
allowing internet providers to install the software themselves. 

“The FBI should make this gizmo an open-source product," he said, 
“Then the secret is gone," 


On the Net: Federal Bureau of Investigation: http://www.fbi.gov 
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American Civil Liberties Union: http://wvAv.aclti.org 
Center for Democracy and Technology : http://www.cdt.oiB 
Pretty Good Pri vacy (PGP): vvww.pgp.com 


Copyright 2000 The New York Times Company 
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FBI’s system to covertly search 
e-mail raises privacy, legal issues 

By Neil King Jr, and Ted Bridis 

Washington, July u — The U.S. Federal Bureau 
of Investigation is using a superfast system 
called Carnivore to covertly search e-mails for 
messages from criminal suspects. 
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ESSENTIALLY A PERSONAL COMPUTER 
stuffed with specialized software. Carnivore represents 
a new twist in the federal government’s fight to sustain 
its snooping powers in the Internet age. But in 
employing the system, which can scan millions of 
e-mails a second, the FBI has upset privacy advocates 
and some in the computer industry. Experts say the 
system opens a thicket of Unresolved legal issues and 
privacy concerns. 

The FBI developed the Internet wiretapping system 
at a special agency tab at Quantico, Va„ and dubbed it 
Carnivore for its ability to get to “the meat” of what 
would otherwise be an enormous quantity of data. FBI 


5/24/02 Release - Pad $24 


|5 


mimmshu 






FZVsyymm m covcnJy search e-mail mi&t privacy; issiwst 


jui ^ iooo nm p« 03 

) http://v.^^ok.c^ns w^43 fe; 


^S.$sj 


Word of the 
Carnivore system 
has disturbed many 
in the Internet 
industry because, 
when deployed, it 
must be hooked 
directly . into Internet 
service providers’ 
computer networks. 


technicians unveiled the system to a roomful of 
astonished industry specialists here two weeks ago in 
order to steer efforts to develop standardized ways of 
complying with federal wiretaps. Federal investigators 
say they have used Carnivore in fewer than 100 criminal 
cases since its launch early last year. 

Word of the Carnivore system has disturbed many 
in the Internet industry because, when deployed, if must 
be hooked directly into Internet service providers’ 
computer networks. That would give the government, at 
least theoretically, the ability to eavesdrop on al! 
customers' digital communications, from e-mail to 
online banking and Web surfing. 

The system also troubles some Internet service 
providers, who are loath to see outside software plugged 
into their systems. In many cases, the FBI keeps the 
secret Carnivore computer system in a locked cage on 
the provider’s premises, w ith agents making daily visits 
to retrieve the data captured from the provider’s 
network. But legal challenges to the use of Carnivore 
arc few, and judges’ rulings remain sealed because of 
the secretive nature of the investigations. 

Internet wiretaps are conducted only under state or 
federal judicial order, and occur relatively infrequently. 
The huge majority of wiretaps continue to be the 
traditional telephone variety, though U.S, officials say 
the use of Internet eavesdropping is growing as 
everyone from drug dealers to potential terrorists begins 
to conduct business over the Web. 


Mews from the WSJ 


Walt Street Journal 
stories on MSNBC 


1 he rBI defends 
Carnivore as more 
precise than Internet 
wiretap methods used in 
the past. The bureau 
says the system a! low's 
investigators to tailor an 
intercept operation so they can pluck only the digital 
traffic of one person from among the stream of millions 
of other messages. An earlier version, aptly code-named 
Omnivore, could suck in as much as to six gigabytes of 
data every hour, but in a less discriminating fashion. 

Still, critics contend that Carnivore is open to 
abuse. 


Mark Rasch, a former federal computer-crimes 
prosecutor, said the nature of the surveillance by 
Carnivore raises important pri vacy questions, since it 
analyzes part of every snippet of data traffic that flows 
past, if only to determine whether to record it for police. 
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“It’s the electronic 
equivalent of 
listening to 
everybody’s phone 
calls to see if it’s' the 
phone call you 
should be 
monitoring,” Mr. 
Rasch said. “You 
develop a 

tremendous amount 
of information.” 


“It’s the electronic equivalent of listening to 
everybody’s phone calls to see if it's the phone call you 
should be monitoring,” Mr. Rasch said. “You develop & 
tremendous amount of information.” 

Others say the technology dramatizes how far the 
ration’s laws are lagging behind the technological 
revolution. “This is a clever way to use old 
telephone-era statutes to meet new challenges, but 
clearly there is too much latitude in the current law ” 
said Stewart Baker, a lawyer specializing in 
telecommunications and Internet regulatory matters. 

Robert Coin -Revere, of the Hogan & Hanson law 
firm here, represented an unidentified Internet service 
provider in one of the few legal fights against 
Carnivore. He said his client worried that the FBI would 
have access to all the e-mail traffic on its system, raising 
dire pri vaev and security concerns. A federal magistrate 
ruled against the company early this year, leaving it no 
option but to allow the FBI access to its system. 

“This is an area in desperate need of clarification 
from Congress ” said Mr. Corn-Re vere. 

“Once the software is applied to the ISP, there’s no 
check on the system,” said Rep. Bob Barr (R., Ga.), 
who sits on a House judiciary subcommittee for 
constitutional affairs. “If there’s one word I would use 
to describe this, it would be ‘frightening.”’ 

Marcus Thomas, chief of the FBI’s Cyber 
Technology Section at Quamieo, said Carnivore 
represents the bureau’s effort to keep abreast of rapid 
changes in Internet communications while still meeting 
the rigid demands of federal wiretapping statutes. “This 
is just a very specialized sniffer,” be said. 

He also noted that criminal and civil penalties 
prohibit the bureau from placing unauthorized wiretaps, 
and any information gleaned in those types of criminal 
cases would be thrown out of court. Typical Internet 
wiretaps last around 45 day's, after which the FBI 
remov es the equipment, Mr. Thomas said the bureau 
usually has as many as 20 Carnivore systems on hand, 
“just in case.” 
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FBI experts acknowledge that Carnivore's 
monitoring can be stymied with computer data such as 
e-mail that is scrambled using powerful encryption 
technology. Those messages still can be captured, but 
law officers trying to read the contents are "at the mercy 
of how well it was encrypted ^ Mr, Thomas said. 

Most of the criminal cases where the FBI used 
Carnivore in the past I S months focused on what the 
bureau calls ^infrastructure protection ” or the hunt for 
hackers, though it also was used m eountenerrorism and 
some drug-trafficking cases. 
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News Burst: FBI uses covert email surveillance system 


Tue, 11 Jul 2000 16:21:36 GMT 
Will Knight 

A super-fast scanning system nicknamed 'Carnivore* is being used by the FBI 
to covertly search through email messages, says the Wall Street Journal 

America's Federal Bureau of Investigation (FBI) is using a super-fast email 
scanning system dubbed "Carnivore” to covertly trawl through email messages 
in order to capture suspected criminals, reports the Wall Street Journal 
Tuesday. 


The revelations have caused a furore among privacy and security advocates, 
because it requires a direct connection to a commercial ISP's network, 
giving the authorities, in theory, access to ail Internet communications. 

Carnivore is reportedly nothing more than a personal computer fitted with 
special software capable of scanning millions of emails in a second. 

According to the WSJ's report Carnivore, which was launched last year, has 
been used to gather evidence in fewer than 1 00 criminal cases. 
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FBI e-mail Snooping Device Attacked 

I 

< By D. IAN HOPPER 

f .c The Associated Press 

WASHINGTON (AP) - Civil liberties and privacy groups are railing against a new system 
designed to allow law enforcement agents to intercept and analyze huge amounts of e-mail in 
connection with an investigation. 

The system, called "Carnivore," was first hinted at on April 6 in testimony to a House 
subcommittee. Now the FBI has it in use. 

When Carnivore is placed at an Internet sendee provider, it scans all incoming and outgoing 
e-mails for messages associated with the target of a criminal probe. 

In a letter addressed to two members of the House subcommittee that deals with Fourth 
Amendment search-and-setzure issues, the American Civil Liberties Union argued that the 
system breaches the Internet provider's rights and the rights of all its customers by reading both 
sender and recipient addresses, as well as subject lines of e-mails, to decide whether to make a 
copy of the entire message. 

Further, while the system is plugged into the Internet provider's systems, it is controlled solely by 
the law enforcement agency. In a traditional wiretap, the tap is physically placed and maintained 
by the telephone company. 

"Carnivore is roughly equivalent to a wiretap capable of accessing the contents of the 
conversations of all of the phone company's customers, with the 'assurance' that the FBI will 
record only conversations of the specified target,” read the letter. "This ’trust us, vve are the 
government' approach is the antithesis of the procedures required under our wiretapping laws." 

Barry' Steinhardt, associate director of the ACLU, said citizens shouldn't trust that such a 
sweeping dala-tap will only be used against criminal suspects. And even then, he said, the data 
mined by Carnivore, particularly subject lines, are already intrusive. 

"Law enforcement should be prohibited from installing any device that allows them to intercept 
communications from persons other than the target," Steinhardt said in an interview. "When 
conducting these kinds of investigations, the information should be restricted to only addressing 
information," 

A spokeswoman for Rep. Charles T. Canady, R-Fla., who heads the House Judiciary 
subcommittee on tire Constitution, said the congressman had no comment on the letter. 

In testimony to Canady's subcommittee, Robert Corn-Revere, a lawyer at the Hogan & Hartson 
law firm in Washington, said he represented an Internet provider that refused to install the 
Carnivore system. The provider was placed in an "awkward position,” Corn-Revere said, 
because the company feared suits from customers unhappy with the government looking into all 
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"It was acknowledged (by the government) that Carnivore would enable remote access to the 
ISP's network and would be under the exclusive control of government agents," Com-Revere 
said. 

Com-Revere told the committee that current law is insufficient to deal with Carnivore’s potential 
and that the Internet provider lost its court battle in part because of the Internet’s connection to 
telephone lines, and that the law was stretched to cover the Internet as well. 

Com-Revere would not reveal the name of his client, and the client lost the case. He said the FBI 
has been using Carnivore since early this year. 

James X. Dempsey, senior staff counsel at the Center for Democracy and Technology, said the 
main problem with Carnivore is its mystery. 

"The FBI is p lac ing a black box inside the computer network of an ISP," Dempsey said, "Not 
even the ISP knows exactly what that gizmo is doing." 


But Dempsey said Internet providers contributed to the problem, by saying that current 
technology does not allow the Internet provider to sort out exactly what the government is 
entitled to get under a search warrant. The carriers complained that they had to give everything to 
the FBI. 

"The service providers said they didn’t know how to comply with court orders,” Dempsey said, 
"By taking that position, they have hurt themselves, putting themselves into a box." 


Marcus Thomas, who heads the FBI’s cyberteehnology section, told the Wail Street Journal that 
the bureau has about 20 Carnivore systems, which are PCs with proprietary software. He said 
Carnivore meets current wiretapping laws, but is designed to keep up with the Internet. 


"This is just a specialized sniffer," Thomas told the Journal, which fi rst reported details about 
Carnivore. 

Encrypted e-mail, done with an e-mail encoding program like PGP, still stays in code on 
Carnivore, and it’s up to agents to decode it, 

Dempsey has a possible solution to the problem, though one that’s probably unlikely - show 
everyone what it does and how it does it, allowing Internet providers to install the software 
themselves. 

"The FBI should make this gizmo an open-source product,” he said. "Then the secret is gone." 
On the Net: Federal Bureau of Investigation: http://www.foi.gov 


American Civil Liberties Union: http://ww.aclu.org 
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Center for Democracy and Technology: http://\vww.cdtorg 
Pretty Good Privacy (PGP): www.pgjj.com 
AP-NY-07-32-00 0SI2EDT 
Copyright 2000 The Associated Press. 
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FBI's Internet Wiretaps Raise Privacy Concerns 

By John Sch wartz 

Washingfon Post Staff Writer * Privacy Special Report 

Tuesday, July 1 1 1 2000; Page A01 


The FBI has deployed an * 

automated system to wiretap the 

Interne^ giving authorities a new ^=? E-Ma h this Artigt^ 

tool to police cyberspace but ^ Prin^r-fdRp^ers^r, 

drawing concerns among civil ' 

libertarians and privacy advocates about how it might be used. 


P»rtn«f , j 
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The new computer system, dubbed "Carnivore" inside the FBI because it ff « 
rapidly finds the "meat" in vast amounts of data, was developed at FBI r 
computer labs in Quarstico, Va., and has been used in fewer than 50 . , 

cases so far . m ~ 

But that number is sure to rise, said Marcus Thomas, chief of the FBI’s w ><e t 

cyber-technology section at Quantico. "In criminal situations there's not 
yet been a large call for it," he said, but the bureau already has seen f. rin 

"growth in the rate of requests.” * ^ ew 

Coun 

yu&ct. 

Civil liberties groups said the new system raises troubling issues about 
what constitutes a reasonable search and seizure of electronic data, in iq-fr 

sniffing out potential criminal conduct, the new technology also could 
scan private information about leeal activities. ' Tm£- 

Amo. 

^ Horn] 

*li goes to the heart of how the Fourth Amendment and the federal gpM 

wiretap statute are going to be applied in the Internet age," said Marc «?<w 

Rotenberg, head of the Washington-based Electronic Privacy 
Information Center. Mars. 

New.. 

The new' system, which operates on off-the-shelf personal computers, 
takes advantage of one of the fundamental principles of the Internet: that 
virtually all such communications are broken up into "packets," or 
uniform chunks of data. Computers on the Internet break up e-mail 
messages. World Wide Web site traffic and other information into pieces 
and route the packets across the global network, where they are 
reassembled on the other end. 

FBI programmers devised a "packet sniffer" system that can analyze data 
flowing through computer networks to determine whether it is part of an 
e-mail message or some other piece of Web traffic. mm% Releaw _ me $33 
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The ability to distinguish between packets allows law enforcement 
officials to tailor their searches so that, for example, they can examine e- 
mail but leave alone a suspect's online shopping activities. The system 
could be tuned to do as little as monitoring how many e-mail messages 
the suspect sends and to whom they are addressed— the equivalent of a 
telephone "pen register," which takes down telephone numbers being 
called without grabbing the content of those calls. 

“That’s the good news," said James Dempsey, an analyst with the Center 
for Democracy and Technology, a Washington high-tech policy group. 
“It is a more discriminating device” than a foil wiretap, he said. 

But Dempsey expressed worries about the new system, which would be 
installed at the offices of a suspect's Internet service provider. Just as the 
device could be used to fine-tune a search, it also could used for broad 
sweeps of data. "The bad news is that it's a black box the government 
wants to insert into the premises of a service provider. Nobody knows 
that it does what the government claims it would do," Dempsey said. 

Existence of the Carnivore system was discussed in a Wall Street 
Journal article yesterday, which reported that the FBI showed the system 
to telecommunications industry experts two weeks ago. 

Albert Gidari, a lawyer who works for the wireless industry, was present 
at the FBI demonstration. He said the FBI’s announcement was intended 
to counter industry' assertions that it would be very difficult to provide 
the kind of pen-register wiretap capability that the agency wants. 

Since the demonstration, Gidari said, one faction within 
telecommunications industry was pleased with the FBI's efforts. But 
Gidari said the other faction was saying: "Wait a minute— what are the 
liability issues? What are the privacy issues? We don’t want third-part v 
software on our system." 

Although Congress has passed legislation requiring telephone companies 
to make their developing high-tech networks easy to wiretap, Gidari is 
one of a large number of industry experts who believe the law does not 
apply to wiretapping the Internet, "The FBI overreaches in everything 
they do," said Gidari, who is president of G- Savvy, an Internet * 
consulting company. 

A former federal prosecutor sounded a more supportive tone. “If what it 
does is it helps comply with wiretaps, and it helps minimize what you're 
getting— to help get what the court authorizes you to get— there's nothing 
wrong with it," said Mark Rasch, now a security consultant with Reston- 
based Global Integrity. 

Still, Rasch said the technology raised questions that have yet to be fully 
explored by law enforcement. The PC robocop examines all packets 
coming through a computer network but gives live law enforcement 
officers only those packets related to the subject of the investigation. 

"The stuff that is exami ned only by a computer and not by a human 
being— was that information searched?” Rasch asked. He then suggested 
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an answer: "It is a search, but it is to an extent less invasive than it would 
be it you dtd not use this technology." 

SfimSv hv ! \v f ? m ! VOr f aCtuaI n y f ame 5n A P ril durin 8 congressional 
testimony by Washington lawyer Robert Com-Revere, who represented 

an Internet service provider that tried to resist attaching the system to its 
network. Com-Revere suggested that such a system could be used to 
track dissidents and journalists online. "There are some human rights 
issues here,’ he said. b 

But Thomas of the FBI said there is nothing mysterious about the new 

ilt wi 1 35 an . eff ? rt on the FBI's part to keep pace with changes in 

technology-to maintain our ability" to lawfully intercept everything 
from pen-register data to Ml wiretaps with court authorization. "It’s not 
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Get credit for that old IBM PC, lapto 


BY PAVLA SHAHI T mmiZ 

F ederal agencies will be able to ob- 
tain credit toward the purchase 
of new IBM Corp. PCs and Up- 
tops by donating their old computers to 
charity via a unique governmentwide 
contract. 

The Department ofVeteram Affairs 
Special Services office and the Air Force 
Medical Logistics Office awarded a de- \ 
centralized blanket purchase agreement j 
last week to iGov.com, an online com- \ 
pmei equipment reseller, that would ai- • 
low government customers to receive a 
trade-in allowance for their older IBM ? 


federal agencies' obsolete systems and 
deliver them to charitable organizations. 

Agencies can specify a charity or al- 
low Gifts In Kind to choose the charity 
that will receive the computer. Gifts In 
Kind's Recycle Technology program, 
which supplies refurbished computers 
to needy organizations, has donated 
about 20,000 computers a year to non- 
proOt organizations since it started in 


1994, said Doug McAllister, Gifts , 
Rmd*$ director of marketing and con 
munications, "Computers and teehne 
am high on the needs list for char 
tyC McAllister said. 

Responsibility for deleting classify 
information from computer hard drN 
or removing the ted drives themselve 
rests with the agency trading In th 
equipment, Mack said. * 


equipment at the tim e of purchase. 

Agencies could receive a $300 credit 
for IBM PCs that have 486 or faster 
processors and are Year zoo-o-compHani, 
said Connne Lingebach. IGovconfs pro- 
gram manager for the Technical Refresh 
and Trade-In program , which is open to 
all government agencies and runs 
rnrough Oct. S v 200*. The credit can be 
applied to the purchase of a new com- 
puter Agencies could receive a $500 cred- 
it for each laptop turned in. 

The BFA, based on iGov.com's Gener- 
al Sendees Administration schedule con- 
tract, “Is a better value, and it enhances 
programs we already have, 1 said govern- 
ment contracting officer Mary Rust. 
"Only iOov offers the trade-in, so h% 
unique." 

The contract guarantees IGov.com at I 
least $500,000 in sales, bur the company I 
anticipates more than $25 million in sales I 
over the life of the contract, said Brad j 
Mack, IGovcom’s vice president of sales. j 
In the future. Rust hopes to add oth- ! 
er types of compu ter equipment to the I 
program. Although there are no other j 
contracts that offer trade-in credits, I 
Rust's office does offer other unique 
programs that benefit schools and oth- 
er charities. 

IGov.com partnered with Gifts In 
Kind International, an Alexandria, Va,~ 
based charity organization, to refurbish 


ACLU: Block FBI e-snoops 


; ev DAM VERTON 

T he American Civil Liberties 
Union appealed to Congress last 
week to protect America ns f fom 
I unreasonable searches and seizures on 
5 Internet in light of recent revela tions 

; that 3 new monitoring tool could enable 
| lh<? FBI to intercept the e-mail of la w- 
l abiding citizens, 

!: In a letter to the 

■ House Judiciary Com- 
1 mittee's Constitution 
| Subcommittee ACLU 
■ director Laura Mur- 
l P>hy argued that the 
l FBI s new Carnivore e-mail surveillance 
j system gives federal law enforcement of- 
\ Leers access to the e-mail of every eus- 
I comer of an Internet service provider and | 
the e-mail of every person who commu- 
nicates with them, 

Tht Carnivore system gives law en- 
forcement e-mail interception capabili- 
ties that were never contemplated when 
Congress passed the Electronic Com- 
munications Privacy Act M in 1986, Mur- 
phy stated in die letter. “The ACLU urges 
the subcommittee to accelerate its con- I 
siderarion of the application of the 
Fourth Amendment in the Digital Age,” 
The Fourth Amendment to the Con- ; 
stitution protects the public from un- 
reasonable searches and seizures. ; 
Attorney General Janet Reno said July 


j 13 that she is now looking Into the alle 
> gat ions. "When we develop new tech 
| ml m\ when we apply the Consrimtiod 
I 3 want to make sure that we apply it in 
| 3 consistent and balanced way” Rene 
j said, 

Robert Corn- Revere, m Internet and 
* commute* dons lawyer with the Wash- 
ington, DX. -based 
lav/ firm Hogan & 
Hanston LLP, first di- 
vulged evidence of 
? tke Carnivore sys- 
tem's abilities during 
a congressional hear- 
j April The FBI mus t have a court 
| order to use Carnivore, 
j ^ nce approved, Carnivore is attached 
directly to an ISP's network and gives 
the FBI access to ail e-mail traffic flow- 
ing across the network* according to the 
: ACLU, The ACLU and others have raised 
concerns that Carnivore intercepts in- 
formation from the headers of e-mail 
messages and may divulge details about 
the contents of the messages. 

The FBI and the law' enforcement . 
and national security communities in 
general are offering a trade: less privacy 
due to increased use of technology in sur- 
veillance in return for greater safety for 
the public," said Daniel Ryan, a lawyer 
and former director of Information Sys- 
tems Security at the Pentagon, m 
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Intel! turf battles rage 


by cm VERTOV j about the impact the new office might 

M ajor portions of a hill that j have on DOD's efforts to orchestrate a 
wom authorize appropriations J Global information Grid (GIG), accord- 
for the US, intelligence com- I mo m the Cnhon *nA w*v *ru» 


if I for the US, intelligence com- 
munity would significantly limit the De- 
fense Department's ability to support 
military operations, warn 
Defense Secretary William 
Cohen and his top military 
adviser. 

Cohen and Army Gen. 

Henry Shel ton, chairman of 
the Joint Chiefs of Staff re- 
cently sent a tetter to senior 
lawmakers on Capitol Hill 
protesting a proposal by the 
House Permanent Select 
Committee on Intelligence 
to establish an intelligence M 

community ccminunicarions Sectary < 
architect position within the Cl A. The 
chief architect would have broad re- 
sponsibilities for the development of a 
worldwide telecommunications system 
that would serve the intelligence com- 
munity , the bulk of which now resides 
in BOD and not the CIA, 

The chief architect, supported by a 30- 
person staff would be funded with 
million in start-up money taken direct- 
ly from the budgets of the Pentagons Na- 
tional Reconnaissance Office, the Na- 
tional Security Agency and the Defense 
Intelligence Agency; seconding to the bill 
‘This unilateral and independent ar- 
chitectural office would seriously dam- 
age, if not totally destroy the efforts of | 


jence com- mg to the Cohen and Shelton letter. The 
nit the Be- : Pentagon has been working on the GIG 
to support concept for more than a year and envi- 
sions a global network capa- 
ble of deli vering secure in- 
formation to all users. 

The GIG architecture splits 
a premium cm the assured 
and timely access by our 
warfighters and policy-mak- 
ers to all forms of informa- 
tion, including intelligence^ 
a Pentagon spokesperson 
said However/'ihere should- 
n't be separate architecmres 
Wiliam Cohen* for combat functions, for 

Sec W of Defence suppofi fmeti ^ [or| forta . 

Cl A. The | tdiigence functions. Otherwise, we'ie 
broad re- $ back at the srovepiped, stand-alone sys- 
merit of a ?■ tents that don't talk to one another in a 
ns system j timely fashion f 
mce com- j An official from the Pentagon's office 
w resides j oi Command, Control, Conurrunications 
| and Intelligence also said that the Pen- 
d by a 30- : tagon supports a broader GIG concept as 
with $80 j opposed to a narrow; Intel iigencc-only 
5X1 direct- j communications architecture. 

igons Na- j r“““~ — — — — “~ 

the nv I A WAR, NOT A BATTLE 

- Defense j intelligence experts characterized the 
0 the bill j latest report m the bill from the House 
ndentar- j Armed Services Committee as little more 
isly dam- than a tool in the struggle for control 
efforts of j | over the Intelligence budget between the 


the DOD chief information officer, who j j House and t he Senate Select Committee 
has ongoing activities with the (mtellb j on intelligence, chaired by Sen, Richard 


gence community] and Defense intelli- 
gence component CIOs to advance in- 
teroperability between and among 
intelligence producers and consumers,” 
Cohen and Shelton told Congress. The 
House Armed Services Committee in- 
cluded Cohen and Shelton's tetter in a re- 
port on the fiscal 2001 Intelligence Au- 
thorization hill, released last month. 

But the Pentagon is also concerned 

f t'PISAl COMFOTER W £ £ K 


Others said the debate canters on the 
larger questions of reforming the Intem- 
gence community and who should be In 
charge; 

-It just one mom Instance of the tort 
bathe over Intelligence/' said Steven 
Aftergood, an intelligence specialist with 
t he Federation of American Scientists.. 


'"Solutions which take down the old 
barriers to interoperability and harness 
I our collaborative networking and com- 
puting capabilities have the most value 
E : and are deserving of support ” the off*- 
i cial said. "Our concerns with the pro- 
* I posed intelligence communications or- 

■ chitect are lessened by the extent to 
! which that entity is free to support the 

■ j broader Global Information Grid arehi- 
| teernre in preference to a narrower, in- 
| telhgence-only network ” 

I Cohen and Shelton expressed opposi- 
j tion to Congress" proposal to expedite 
] the real-world use of the Joint IntelU- 
| gence Virtual Ajclutecrure tool in the in- 
| telligence community, saying it is "pre- 
; mature” to designate the software 
j capability as the community standard 
i for collaboration. The program is a next- 
| generation digital collaboration effort 
| headed up by Defense Intelligence 
i Agency. Congress called for oversight of 

t ^ c? 

j the program to be transferred from DOD 
| to the CIA, 

| ”We feel strongly that it would be 
j counter productive both w prohibit fur- 
| ^ ,<?r non } 1 VA technology pursuits and 
j to remove the program from the BCD 
j oversight that has made it the success 
l that the committee commends/’ stated 
] Cohen and Shelton 
I The CIA dedi ned to comme nt on the 

I proposed legislation. * 

'The baste question \ $ t will there be $ I 

strong director of centrsl intelligence 
who fa in charge of the whole communi- 
ty? The Defense Department says no,° 
Furthermore, "because of the ongoing 
militarisation of Intelligence, my bet is that : 
the Pentagon wlii get its way," he said. j 

Robert Steele, a 2 5 -year veteran of the j 

intelligence community and author of the 
recent book “On intelligence; spies and 
Secrecy fn an Open World," said the Infor- 
mation Age has challenged t he whole no- 
tion of having a cent ral agency responsible 
for intelligence. "In the age of distributed 
information, the concept of central Intelli- 
gence 1$ an oxymoron," Steele said, 

- Dan Verier* 

... — 
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FBI e-mail Snooping Device Attacked 

By £> IAN HOPPER, Associated Press Wr iter 

WASHINGTON (AP) - Civil liberties and privacy groups railed 
Tuesday against a new system designed to allow law enforcement asents 
to intercept and analyze huge amounts of e-mail in connection with an 
investigation. 
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SwthfpBIP^U i„ C S ,V ° re ’” WaS f,rst hinted at 00 April 6 5n testimony to a House subcommittee. 
When Carnivore is placed at an Internet Sendee Provider, it scans all incoming and outcome P f 

messages associated with the target ofa criminal probe. mcormn^ ana outgoing e-mails t 

In a letter addressed to two members of the House subcommittee that deals with Fourth Amendment 

to mer -f " ?}?! LibertiK "**> tta .he “S Lxte 

adSes 2 well « ° f ? llS $ usU ? mcrs b >' readin S both sender and recipient 

addresses, as well as subjvci Hues of e-mails, to decide whether to make a copy of the entire message. , 

Further, while the system is plugged into the Internet provider’s systems, it is controlled soieiv hv tho 

* tr3dhi0na3 Wirm? ’ the ** is nwimabed by the 16 

Carnivore is roughly equivalent to a wiretap capable of accessing the contents of the conversation*. nf 

ilie *■»«* > ta ti« fbi miv comSSs 

.. y ( target, lead the letter. This ’trust us, we are the government’ approach is the antithesis o 
the procedures required under our wiretapping laws.” H anmnesu, o 

Barry Steinhardt, associate director oi the ACLU, said citizens shouldn't trust that such a sweenino dat 
tap will only be used against criminal suspects. And even then, he said the data mined bv CaSv Ire 
particularly subject lines, is already intrusive. b> Canuvore ’ 

"Law enforcement should be prohibited from installing any device that allows them to intercom 
communications from persons other than the target,” Steinhardt said in an interview^ " When conductm 
these kinds of investigations, the information should be restricted to only addressing infonSuon'' 

SXTil’ifA C “ K b Cma<ly ' R ' Fla ’ whD «» Constitution subcommittee, said 
mat the congressman had no immediate comment on the letter 
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in Si SSrtSf he K f m Com-Revere, a lawyer ai the Hogan & Hartson law fir 

The^vSrt,?LliS, • represented an internet provider that refused to install the Carnivore svste 

from P c™stomere uiSaom< 2,1 awkward P 0Slt . 10n tf Corn ' Revere said » because the company feared sui 
iroxn customers unhappy with the government looking in to all the e-mail. 

k T° Wi m S u d (b 'I ih ^ovcmtnml) that Carnivore would enable remote access to the ISP's 
network and would he under the exclusive control of government agents," Com-Revere said. 



— ----- — - u<wu wuu uduie in pan oecause oi 

lines, and that the law was stretched to cover the Internet as well 


Com-Revere would not reveal the name of his client, and the client lost the case. He said that the FBI 
has been using Carnivore since early this year. uut me t li 1 

Cem “ fW DOT0CraCy *" d Tectaolo B’- «M •!«< the 

""' VOrk ° f 2 ” K1V ' Dcmpsey said - " N »« «*» * 

But Dempsey said that Internet providers contributed to the problem, bv savine that current t ec Wo<r 
does nm allow the Internet provider to sort out exactly what the government ^entitled to ce* u'nd- ^ 
search warrant 1 he earners complained that they had* to give everything to the FBI. “ fe 

The sen-ice providers said they didn’t know how to comply with court orders " D'-mosev s--*; 4 ”p v 
takmg that position, they have hurt themselves, putting themselves into a box " ‘ } 

buSu\5°S Sr!? the FBI s Cyb f r 'f cchnol °gy Section, told the Wall Street Journal that the 
bureau has about ^0 Carnivore systems, which are PCs with proprietary software. He said C^rntvn^ 

meets current wiretapping laws, but is designed to keep up with the Internet, 

cSfvore USt “ Spedalized SiliiTer *” Thomas io!d «» Journal, which first reported details about 

feSfef “ e ' m,il ”"*« Pr °* r ™ “* P0P - s,iil sl3 « ”> 0» Carnivore, an 

Dempsey has a possible solution to the problem, though one that's probably unlikely - show everyone 
what it does and how it does it, allowing Internet providers to install the software themselvk ' 

The FBI should make this gizmo an open-source product," he said, "Then the secret is gone.” 


On the Net: Federal Bureau oflnvestigation: http:tfvww.lbl.gov 
American Civil Liberties Union: http://mTO .aclu.orp 
Center for Democracy and Technology: http:tfwm v. cdt.org 
Pretty Good Privacy (PGP): wmv.pgp.com 
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Reno to review the FBI's Internet wiretap system 

WASHINGTON, July 13 (Reuters) - US. Attorney General Janet Reno said on Thursday she 
would review a new FBI automated computer system that can wiretap the Internet to determine 
whether it might infringe on privacy rights. 

"I'm taking a took at it now to make sure that we balance the rights of all Americans with the 
technology of today,’’ Reno said when asked about the FBI system known as ' 'Carnivore" that 
can be used to monitor all e-mails of a criminal suspect. 

Reno emphasised that any such wiretaps, which are placed on an Internet sendee provider's 
system, cannot be be done without an appropriate court order "according to processes and 
procedures used now for lawful surveillance.” 

"We are looking at it to see what is needed, if anything,” she said. "If additional regulations are 
needed, we will pursue those,” 

She fold her weekly news briefing that she wanted to make sure that the new technology doss not 
become "a cause of concern for privacy interests." 


The American Civil Liberties Union (ACLU) and other privacy advocates have expressed 
concern the new system could scan private information about legal activities, resulting in 
excessive monitoring of online communications. Besides e-mails, she system can monitor visits 
to Web sites and Internet chat sessions. 


Reno said she only began looking into the issue and asking questions after news articles appeared 
earlier this week. The FBI recently demonstrated the system to executives in the 
telecommunications industry. 

"We have known about the capacity to do this. Its application and what has been done had not 
been brought to my attention, ” Reno said. 


The FBI’s director, Louis Freeh, reports to Reno. 

"1 just wunt to make sure that industry, privacy interests, law enforcement interests are all fully 
advised so that we can consider anybody’s concerns and make sure that we address them,” Reno 
said. 

She was unable, to say whether the system would continue to operate until her review was 
underway. 

13:29 07-13-00 

Copyright 2000 Reuters Limited. All rights reserved. 
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Controls on Export of Encryption Software to be 
Eased 


By John Schwartz 
Washington Post Staff Writer 
Monday, July 17, 2000; 1:12 PM 

The Clinton administration 
announced today that it will 
loosen controls on the export of 
encryption software - the 
programs that help users 
scramble messages and data to 
protect it from prying eyes - and 
called for new legislation intended 
to make sense of wiretapping in 
the Internet age. 


—live Online— 

* David Steer 

of TRUSTe discusses how to protect 
sensitive personal information at 1 1 
<:.m, Wednesday. 

Protect Your K ids; Amy Aldmsn of 
the Center for Media Education 
discusses ways to protect you 
children online at 1 p.m, Thursday, 


— — -Sp edal Repo rt~ 


What ' s Yp ar Op i n ion? 

"We need to seek a better balance g-nasi this Article 

amongst the sometimes Prmter-Fngnriiv Version 

competing goals of the protection 

of public safety, the achievement of economic growth and digital 
opportunity - and the preservation of privacy and civil liberties," said 
White House Chief of Staff John Podesta in a speech delivered today at 
the National Press Club. 

Under the new policy, American companies will be able to export the 
strongest cryptography products to users in any nation in the European 
Union and to Australia, Norway, the Czech Republic, Hungary', Poland, 
Japan, New Zealand and Switzerland. The government will eliminate a 
current statutory 30 -day waiting period before such exports can take 
place, but keeps in place a requirement that new technologies be 
submitted to the government for a technical review. 

Encryption has been a high-tech battlefield from the early days of the 
Clinton administration. Few technologies are as important in the fight to 
maintain persona! and business privacy - hut few technologies, as well, 
present such daunting issues for law enforcement, which warns that 
criminals and terrorists can use "crypto" to cloak their plans and 
activities. But high-tech companies successfully argued that U.S, 
restrictions only harmed American companies, since overseas firms 
were successfully marketing strong encryption products, and in January 
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today's speech, Podesta stressed tire now-familiar theme that the online 
revolution has been a mixed blessing. At the same time that the Internet 
makes Shakespearean sonnets and new photos of Mars available 
anywhere in the world, it has undermined the pirvacy of our most 
sensitive financial and medical records, and allows such evildoers as 
international drug traffickers to communicate freely and secretly. 

"That's why we have to make sure the Internet is used to the benefit of 
people - not to their detriment," the Podesta said. 


The most sweeping part of the Podesta address was a call for a thorough 
rethinking of the Fourth Amendment's protection against unreasonable 
search and seizure in the Internet age. Electronic mail transmitted by 
high-speed connections such as DSL modems, Podesta's speech argued, 
has never enjoyed the legal protections the law gives to telephone 
conversations - or to slower dial-up modems under the Electronic 
Privacy Communications Act of 1984. At the same time, cable privacy 
laws are tougher than wiretap standards when it comes to gaining access 
to subscriber records ~ which could include e-mail sent via cable 
modem. Podesta called for new legislation to address the inconsistencies 
in the legal framework. "It’s time to adopt legislative protections that 
map these important privacy principles onto the latest technology," he 
said. 

Podesta's speech also make oblique reference to a controversial new 
surveillance technology revealed last week, which is known as 
"Carnivore." Carnivore gives government the ability to selectively 
monitor Internet traffic of individuals in ways that can give law- 
enforcement the Internet equivalent of "trap and trace" capabilities used 
in telephone surveillance. Unlike full-fledged wiretaps, the judicial 
oversight of trap and trace is slight, and the protection against abuses of 
the technology fay law enforcement is weak. Podesta called for "greater 
judicial oversight of trap and trace authorities." 

Podesta's speech stated that this legislation could be passed by the end of 
the year - an unlikely prospect in these waning days of the legislative 
session. "It's time to update and harmonize our existing laws to give all 
forms of technology the same l egislati ve protections as our telephone 
conversations,” he said. 

The speech also made the point that the administration's preference is 
for public-private partnerships to make the Internet secure against 
attack, hut noted that Congress has not appropriated any of the $90 
million President Clinton has requested for security research and cyber 
policing. "It’s time," Podesta noted, that "they picked up the pace and 
provided the protections that are essential to America’s cyber security.," 


The speech was not well received by civil liberties advocates, who have 
fought Carnivore and other administration attempts to develop 
wiretapping capabilities on the Internet, Barry Steinhardt, associate 
director of the American Civil Liberties Union, called the speech 
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"deeply disappointing." 

Rather than defending Carnivore, Steinhardt said, Fodesta should have 
announced that the administration was suspending its use. "Carnivore 
represents a grave threat to the pri vacy of all Americans by giving law 
enforcement agencies unsupervised access to s nearly unlimited amount 
of communications traffic," Steinhardt said in a statement. 

’’While tlie Clinton administration's proposals have some heartening 
qualities to them, they are too tittle and too late,’’ with too little time in 
the legislative session to pass new bills. "Last-minute legislative 
proposals cannot satisfy' the deep privacy concerns of the American 
public," Steinhardt said. 

© 2000 The Washington Post Company 
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Proposal Offers Surveillance Rules for the 
Internet 

White House Tries to Balance Rights of Computer Users 
and Law Enforcement 

By STEPHEN LA BATON with MATT RJCHTEL 

W ASHINGTON, July 17 - The White 
House said today that It would propose 
legislation to set legal requirements for 
surveillance in cyberspace by law enforcement 
authorities similar in some ways to those for 
telephone wiretaps. 

Privacy advocates and civil liberties groups 
welcomed some aspects of the proposal hut 
said they remained alarmed about a new F.8.I. 
computer system that searches and intercepts 
private e-mail and can easily capture 
communications of people not suspected of 
crimes. 

The legislati ve proposal was made as the 
administration also announced today that it had 
eased export controls on encryption technology, 
making it significantly easier for American 
companies to sell software products to the 
European Union and eight other trading 
partners that cart be used to keep computer data 
and communications secure. 

Both the electronic surveillance proposal and 
the export control changes are part of a broader 
policy outlined in a speech today by John D. 

Podesta, the White House chief of staff. He said 
the policy tries to balance the privacy rights of 
computer users against the needs of law 
enforcement to be able to monitor digital 
communications. 
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■ House Proposes New Standard *V Monitoring the Internet 


Congress and federal regulators have done little work in the area, 
even as the world has quickly come to rely heavily on 
communications through cyberspace-. More than 1 ,4 billion e-mail 
messages change hands every day. 

The administration's legislative proposal on electronic surveillance 
tries to fix the inconsistent patchwork of laws that apply different 
standards to telephone, cable and other technologies with a single 
standard for those systems and the Internet. Prospects for the 
proposal in Congress are uncertain. 

Until now, law enforcement agencies have been able to monitor 
electronic communication with only modest court supervision. 

The proposed legislation would require that the same standards that 
apply to the interception of the content of telephone calls apply to 
the interception of e-mail messages. Specifically, it would require 
law enforcement agents to demonstrate that they have probable 
cause of a crime to obtain a court order seeking the contents of a 
suspect's e-mail messages. 

The proposal would also give federal magistrates greater authority 
to review requests by law enforcement authorities for so-called pen 
registers — lists of the phone numbers called from a particular 
location and the time of the calls. The magistrates now have no 
authority to question the request for such lists, which are frequently 
used by the authorities. 

In the context of the Internet, existing laws are ambiguous about 
what standards apply for different kinds of surveillance. Many 
limitations imposed on law enforcement in the con text of telephone 
wiretaps — like the requirement that such taps be approved at the 
highest level of the Justice Department — do not appear to apply to 
e-mail surveillance. 

Moreover, the Cable Act of 1984 sets a far harder burden for 
government agents to satisfy when trying to monitor computers 
using cable modems than when monitoring telephones. That has 
proved troublesome for law enforcement authorities as more 
Americans begin to use high-speed Internet service through cable 
networks. The Cable Ac t also requi res that the target of the 
surveillance be given notice and an opportunity to challenge the 
request. 

"It’s time to update and harmonize our existing law's to give all 
forms of technology the same legislative protections as our 
telephone conversations," Mr. Podesta said in a speech at the 
National Press Club. "Our proposed legislation would harmonize tire 
legal standards that apply to law enforcement's access to e-mails, 
telephone calls and cable services." 

White House officials said today that they hoped the proposal would 
break a logjam in Congress where a variety of different measures 
have been introduced dealing with electronic surveillance. The 
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admi nistration's proposal adopts some elemen ts of both Democratic 
and Republican bills. 

But Congressional aides said there was too little time left in the 
legislative session and that the matter would in all likelihood remain 
f" unresolved until after the next term begins, in 2001 , 

_ t. 

Administration officials said the proposal would apply to 
communications that either begin or end in the United States. It 
would not apply to e-mail messages transmitted entirely outside the 
country. 

Privacy and civil liberties groups criticized the administration's 
proposal because it would continue to permit the government to use 
a new surveillance system that the groups say may be used far more 
broadly than older technologies, enabling federal agents to monitor 
an unlimited amount of innocent communications, including those 
of people who are not targets of criminal investigations. 

The system, used by the Federal Bureau of Investigation, is called 
Carnivore, so named, agents sav, because it is able to quickly get the 
"meat” in huge quantities of e-mail messages, so-called instant 
messaging and other communications between computers. 

Carnivore is housed in a small black box and consists of hardware 
and software that trolls for information after being connected to the 
network of an Internet service provider. Once installed, it has the 
ability to monitor all of the e-mail on a network, from the list of 
what mail is sent to the actual content of the communications. 

Marcus C> Thomas, section chie f of the Cyber Technology Section 
of the F.BX, said the technology was developed 5 8 months ago by 
F.B.l. engineers and has been used fewer than 25 times. Mr. Thomas 
said that Carnivore had potentially broad capabilities and that he 
understood the concerns of pri vacy groups. 

"It can do a ton of things," he said. "That's why it's illegal to do so 
without a clear order from the court." 

He said that most Internet sendee providers had cooperated with 
requests to use Carnivore. 

Privacy groups and some Internet service providers have been 
deeply critical of the use of Carnivore because, once installed on a 
network, it permits the government to take whatever information it 
wants. 

Moreover, the government has not said what it does with the 
extraneous material it gathers that is not relevant to the particular 
surveillance. 

The issue does not often arise today with the monitoring of 
telephone conversations because when a law enforcement authority 
wants to see a list of telephone calls made by a suspect, the agent 
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gets an order from a magistrate, presents the order to a telephone 
company, and the company then turns over the list. 

In at least one instance, an Internet company did not cooperate so 
readily with the government. In December, federal marshals 
approached the company with a court order permitting them to 
deploy a device to register time, date and source information 
involving e-mail messages sent to and from a specified account 


Trying to establish 
a single standard 
for different 


Concerned the device would 
record broader information, the 
company countered with a 
compromise: it would provide the 
government with the requested 


technologies. 


information about e-mail senders 

and recipients, according to Robert 

Com-Revere, a lawyer for the 
company, in recent Congressional testimony. The company was 
later identified as EarthUnk, a service provider with 3.5 million 
subscribers. 


Mr. Com-Revere said the government initially accepted the 
compromise but later became dissatisfied and wished to use its own 
device. EarthLInk objected but was overruled by a a federal court, 
which ordered the device deployed. 

Other Internet companies have also been critical of Carnivore. 

William L, Schrader, chairman and chief executive of PSINet, a 
major commercial Internet service provider, said that the system 
gave the F.B.L the ability to monitor e-mail messages of every 
person on a given network. He said he would refuse to permit the 
government to use the technology at PSINet unless agents could 
prove that it could only sift out the traffic from a given Individual 
that is the target of a court order. 

"I object to American citizens and any citizens of the world always 
being subject to someone monitoring their e-mail," said Mr, 
Schrader, whose company serves about 100,000 businesses and 
more than 10 million users. “I believe it's unconstitutional and I’ll 
wait for the Supreme Court to force me to do it." 


Civil liberties groups, meanwhile, said that today's policy 
announcement was an inadequate response to the growing 
controversy over the deployment of Carnivore. 

"Today's speech was camouflage to cover the mess that is 
Carnivore," said Barry Steinhardt, an associate director of the 
American Ci vil Liberties Union, "in light of the public and 
Congressional criticism of Carnivore, we had hoped and expected 
far more from an administration that likes to tout its sensitivity to 
privacy rights. Rather than glossing over Carnivore, Podesta should 
have announced that the administration was suspending its use." 

Facing growing concerns about 
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Facing growing concerns about 
Carnivore, Attorney General Janet 
Reno said on Thursday that she 
would review whether the system 
was being used in a manner 
consistent with privacy rights in 
the Constitution and in federal 
law, A subcommittee of the House 
is set to hold a hearing next week on the system. 


Concern that the 
proposals allow 
federal agents too 
much leeway. 
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While the civil liberties and privacy groups applauded giving judges 
greater discretion to review certain kinds of requests tor 
surveillance, they were critical of other aspects of the proposal. 

Mare Rotenberg, director of the Electronic Privacy Information 
Center, a research organization that studies privacy issues and 
technology, criticized the administration for lowering the standards 
for surveillance of cable modems rather than raising the st andards 
for telephone surveillance. 


"The Cable Act provides for one of the best pri vacy protections in 
the United States," Mr. Rotenberg said. ’’The question is whether to 
harmonize up or harmonize down. Our view is this harmonizes 
down.” 

Rut administration officials said tits Cable Act never contemplated 
that there would be broad use of cable modems for e-mail traffic and 
that the standards used for obtaining warrants for telephone 
surveillance should also apply to digital communications through 
cable networks. 
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HEADLINE: The FBI's Carnivore: It bites only under court order 
BYLINE: By MICHAEL KIRKLAND 
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BODY: 

The FBI is in a full-court press to reassure the public about its Carnivore intercept system, designed to 
perform a "wire-tapping" function on the Internet. 

During a background briefing for reporters Friday, FBI officials said die system can only be used under 
court order, and that "procedure, training and audits" of its use will prevent technicians from attempting 
unauthorized snooping. 

A senior official added that the bureau is looking for "a couple of technical institutions" outside the FBI 
to independently "validate and evaluate" the system's operation and integrity. 

The system has drawn fire from an unlikely coalit ion of critics. 

The American Civil Liberties Union and similar groups have attacked Carnivore as new government 
intrusion without proper safeguards. The Republican leadership of Congress has also been highly critical, 
and a House Judiciary subcommittee has planned hearings Monday to explore what some politicians 
believe is a need for new federal restrictions on its use. 

Meanwhile, the average computer user may feel that Big Brother is looking over his or her shoulder. 
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Not so, says the FBI in its most soothing official voice. 


At Friday’s briefing in a conference room at bureau headquarters in Washington, the senior FBI official 
said the Carnivore program is three years old, and, "ft began because we were receiving court orders to 
do intercepts on the Internet." 

Carnivore software - so named because it looks for the "meat” in a data stream - uses a Windows 
platform and is contained on a personal computer that is plugged into an Internet service provider. The 
access is allowed only for the length of time set out in a court order. "When the order expires, we take our 
equipment away," the senior official said. 

the ISP usually performs some "pre-filtering" of data so that the amount of information traveling through 
the Carnivore "filter” is not overwhelming. The Carnivore device can perform a traditional "pen 
register” function on the Internet - record and store the origin and destination of e-mail - or capture the 
content of an e-mail message, much like a traditional phone tap, only in a much more specific way. 

"That filter is configured to fit the contour of the court order we're assigned to do,” the senior official said. 
In other words, it will only select and copy specific information authorized fay a federal judge. Die system 
targets e-mail by an "authorization" code peculiar to an individual user, and die FBI will not monitor 
subject lines on e-mail. , 


The filtering process will not slow down computer response time, another FBI official familiar with the 
technology said. "It’s just passively watching the bits." R elease a 
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Hie approval process for a Carnivore intercept is also extremely rigorous, an FBI official expert in cyber 
legal issues said. Investigators seeking a court order to use Carnivore must go through an internal FBI 
review process, then the request must be approved by the attorney general or the deputy attorney general 
before a federal judge is approached for a court order. 

Less than a dozen such requests have been made over the last year for criminal probes - as opposed to 
national security investigations - and no request has been refused by a judge. 

"These (intercepts) are not implemented trivially," the FBI legal official said, both because of the expense 
and the depth o f review. 

What about someone outside the FBI hacking into the Carnivore device and accessing an innocent 
person's e-mail? 

"The device cannot be penetrated from the Internet side," the FBI technical official said, "Theoretically," 
a hacker could beat very high odds and randomly dial into a separate monitoring line, he added, but even 
that line is protected by heavy security. 

The senior official at Friday’s briefmg conceded that the name of the sy stem - Carnivore - has caused 
some apprehension. “Naming is always a very sensitive thing," the official said, “This experience is 
sobering.” The official said the FBI would gi ve some thought in the future to the effect the name of an 
operation or procedure might have on the public. 

"Sniffer" might be a fairer term. "It’s a customized packet sniffer," the FBI technical official said. 

”A very well-focused sniffer," the senior official added. 
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The Feds Can Read Your E-Mail 


NswsMax.com 
Wednesday, July 12, 2000 

First it was Echelon, the global eavesdropping system Uncle Sam and John Bull 
have been using to spy on satellite-transmitted phone calls, e-mails and fax 
messages. Now it's Carnivore, the FBI’s newest electronic snooping device that 
can read your e-mail right off your mail server. 

Capable of scanning millions of e-mails a second, Carnivore can easily be used 
to monitor everybody’s e-mail messages and transactions, including banking 
and Internet commerce. If they want to, the feds can find out what books you’re 
buying online, what kind of banking transactions you conduct — in short, 
everything you do when you go online and send e-mail, whether private or 
commercial 


The FBI has been quietfy monitoring e-mail for about a year. Two weeks ago 
the feds went public and explained the high-tech snooping operation to what the 
Wall Street Journal called "a roomful of astonished industry specialists." 

According to the bureau, they've used Carnivore - so called because it can 
digest the "meat" of the information they're looking for - in less than 100 cases, 
in most cases to locate hackers but also to track terrorist and narcotics 
activities. 


But there is nothing to stop Carnivore from making a meal of your e-mail 
messages and transactions if they decide that’s what they want to do and can 
get a judge to issue a court order allowing them to tap your e-mail as they would 
your phones. 


That's scant comfort considering the underhanded means the feds employed to 
get court orders to raid the Branch Davidian compound, or to win a judge’s 
permission to stage what amounted to an illegal armed raid on Elian Gonzalez's 
Miami home. 

Carnivore is nothing but a store-bought personal computer with special software 
that the FBI Installs in the offices of Internet service providers (ISPs). 


The computer is kept in a locked cage for about a month and a half. Every day 


http^A\'ww'.newsmax.com/articles.Ya-2000/?/l 1/214653 
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an agent comes by and retrieves the previous day’s e-mail sent to or by 
someone suspected of a crime. 

But critics say that Carnivore, like some ravening beast, is simply too hungry to 
be trusted - that it gives the feds far too much access to too much private 
information. 

"This is more of a vacuum cleaner-type approach - it apparently rifles through 
everything," David Sobei, general counsel for the Electronic Privacy information 
Center, told Fox News. 

“It's potentially much more invasive than telephone surveillance,” 

Carnivore could conceivably monitor afi the e-mail that moves through an ISP ~ 
not merely messages sent to or from the subject allegedly being monitored. 
Critics compare it to eavesdropping on all the phones in a neighborhood simply 
to zero in on just one phone. 

Disturbingly, the FBI has prevailed in challenges against forcing ISPs to allow 
Carnivore to be installed in their offices. According to the Wail Street Journal, 
one unidentified iSP put up a legal fight against Carnivore early this year and 
lost. 

The FBI defends Carnivore, insisting it is used selectively and monitors only the 
e-mail of the subject. They say that messages belonging to those not being 
probed, even if criminal, would not be admissible in court. 

"The volume of e-mail in a location is generally fairly small and being managed 
by a small number of e-mail servers on a fairly low-speed network," said Marcus 
Thomas, chief of the FBI’s cyber technology section. 

"The system is not unlike 'sniffers’ used within the networks every day.” 

That fails to satisfy critics such as Sobei. He says Carnivore is similar to 
Russia's surveillance system, called “SORM," which all Russian ISPs are forced 
to install to allow the government to spy on whomever it chooses. 

It's also similar, he says, to the notorious Echelon, the National Security 
Agency's global eavesdropping system, which intercepts telecommunications 
transmissions from around the world and looks for keywords that could indicate 
illegal activity. 

"Carnivore is really the latest indication of a very aggressive stance that the 
bureau is taking in collecting as much information as technically possible," 

Sobei said. 


FBI spokesman Paul Bresson insists that law-abiding citizens have nothing to 
fear from Carnivore. "Anytime we develop a system, we’re basically balancing 
the interests of national security against that of the privacy of the public," he 
said. 


"This issue’s always going to come up. We're always going to get questions We 
understand that.” 
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Electronic Surveillance 


Existing laws Permit Collection 
Of Information From E-Mail, FBI Says 

T he Federal Bureau of Investigation takes the posi- 
tion that current federal law gives it the authority 
to implement the use of special software and hard- 
ware called “Carnivore" to collect information from the 
e-mail messages traveling through an Internet service 
provider's e-mail server, according to testimony by FBI 
and Justice Department officials July 24 at a congres- 
sional hearing. The hearing before the House Judiciary 
Committee's Subcommittee on the Constitution was j 
convened in response to an uproar triggered by a July 
1 1 article in the Wolf Street Journal disclosing the ex- 
istence of Carnivore, 

According to the officials’ testimony, if an Internet 
service prorider is financially or technologically unable 
or unwilling to provide information on e-mails pursuant j 
to a court order, the FBI will hook a Carnivore unit up 
to the ISP’s server. Carnivore scans what officials refer 
to as "the smallest subset" of information from in com- j 
ing and outgoing e-mail messages. Carnivore then du- 
plicates the information and lets the transmission 
stream continue to flow. 

Carnivore roads the incoming information and filters 
ft according to protocols based on the original court or- 
der. Usually, the order will authorize the FBI to collect j 
the “to” and ‘"from" information from messages going l 
io and from a particular e-mail address. Only the rel* ! 
evant information will be recorded. All extraneous in- j 
formation will remain only temporarily in the random 
access memory* and will not be fixed in a stable, re- 
corded format 

The result, according to the PEL will be a list of 
e-mail messages that have been sent from or received 
by a particular e-mail address along with the “to” and 
“from” information. The FBI likens this to the results 
obtained by a combination of. telephone trap-and-trace 
and pen register devices, which produce a list of tele- 
phone calls to and from a particular number giving only 
the calling number or the number called, " 

The FBI has implemented Carnivore IS times since 
January and about 25 times overall since it was put into 
operation two years ago, according to Donald M Kerr, 
assistant director of the FBI. 

Current law Authorizes Carnivore* Kerin V, di Gregory, 
deputy assistant attorney general for the criminal dm- 
sion, testified that the FBI is authorized to implement 
Carnivore by the current pen register and trap-and- 
trace law, 18 USC 3 121 et seq., and wiretap law, IB USC 
2510-22* 

The pen register law allo ws an FBI investigator to ap- 
ply for an ex parte order from a court by submitting an 
affidavit affirming a certification by the applicant that j 
’the information likely to be obtained is relevant to an 


ongoing criminal Investigation*” The investigator need 
not make a showing of probable cause, and the court 
does not have the discretion to refuse to Issue the order. 

By following this procedure, the FBI may also obtain 
from an ISP the “to" and “from" information from in- 
coming and outgoing e-mail messages for a particular 
address. 

Rep. Jerrold Nadier (D-MY.) expressed concern that 
a subject of such scrutiny might never come to know 
that his privacy had been invaded in such a manner, be- 
cause the pen register law does not require disclosure if 
no charges are ever brought. 

Di Gregory* disputed that any invasion of privacy 
would have taken place in such a situation. He said that 
UvS. Supreme Court precedents establishing that a tele- 
phone user has no legitimate expectation of privacy in 
the numbers he dials supports the view* thai an e-mail 
user has no such expectation of privacy in the ad-; 
dresses on incoming and outgoing e-mail communica- 
tions. 

According to di Gregory*, the FBI may gain access to 
the content of e-mail messages under the wiretap law’ 
The wiretap lav/ requires a high-ranking officer of the 
Justice Department to authorize an application for a 
court order. The court may then issue an order autho- 
rising the government to listen in on a telephone con- 
versation if it finds that there is probable cause to be- 
lieve that someone is committing, has committed, or is 
about to commit one of the offenses listed in 18 USC 
2516, that there is probable cause to believe that a wire- 
tap will intercept communications concerning that of- ; 
fense, that normal investigative procedures have failed 
or appear to be unlikely to succeed or are too danger- 
otis, and that there is probable cause to believe that the 
line to be tapped is the line that is likely to be used for 
such a communications. 

According to Kerr and di Oregon*, implementing 
Carnivore under these statutes will result in minimized I 
and particularized information gathering, and does not 
amount to a search of all incoming and outgoing e-mail ; 
messages traveling through an ISP’s server. Addition- 
ally, in-house, technological, judicial, and adversarial 
oversight will ensure that these methods are not 
abused. 

Croups Dispute Claim of Authority This assertion was 
flatly contradicted by Barry* Stemhardt of the American 
Civil liberties Union, who said that such filtering nee- j 
essarily involves the inspection of every single e-mail 
message traveling through a server. Such broad author* ; 
ity to filter through private communications was never 
contemplated by Congress when passing the pen regis- 
ter end wiretap laws, Steinhardt said. Furthermore, he I 
said, no matter what promises the administration : 
makes regarding limiting its data gathering powers, re- 
cent history should warn Congress not to believe those 
promises, 

Steinhardt offered as an example the passage of the 
Communications Assistance to Law Enforcement Act of 
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19^4, 4? SC 1001 et seq., which resulted from a comprO' 
mlse with law enforcement agencies afraid that new 
technology would hamper surveillance of telephone 
calls. He said that in exchange for requiring new digital 
telephone networks to be constructed to preserve exist- 
ing surveillance capabilities, the FBI agreed not to use 
the statute to fry to require telephone service providers 
to create new surveillance capabilities. Nevertheless, 
according to Stelnhardfs testimony, the FBI has "con- 
sistently sought greater capacity and new surveillance 
features that did not exist in 1994, In some cases, they 
have sought capabilities that they specifically promised 
the Congress they would not seek* 1 

Filtering out “to” and “from* information is not as 
easy as the FBI makes it sound, according to Alan Dav- 
idson of the Center for Democracy and Technology, 
Davidson presented the subcommittee with examples of 
the type of data packets that are collected by Carnivore, 
In many cases, he said, the "to" and "from" informa- 
tion that the FBI is seeking cannot be obtained without 
looking in the body of the message. 

Both Steinhardt and Davidson, as well as Peter Wil- 
liam Sachs, president of New Haven, Conn., ISP 
ICONN LLC, testified that the type of information that 
the FBI says it wants from Carnivore can be easily gath- 
ered by the ISPs themselves and turned over to law en- 
forcement agencies who have obtained appropriate 
court orders. 

Both Sides Living in the Past Both law enforcement 
and civil liberties groups are still thinking m terms of 
the traditional switched telephone network, according 
to Stewart Baker; a technology' expert with the Wash- 
ington Jaw firm of Steptoe & Johnson, and former gen- 
eral counsel to the National Security Agency. 

Baker said that it is unrealistic to expect ISPs, par- 
ticularly small ones, to be capable of complying with 
such an order on its own. "The FBI has got it right," he 
said. Without Carnivore or some similar program, ISPs 
would be faced with "an extensive unfunded mandate" 
to collect Information pursuant to court orders. 

On the other hand, for the government "to say you 
don't have an expectation of privacy in information 
held by a third party is just crazy,” Baker said. "Our en- 
tire lives are In the hands of third parties.” 

Some kind of technological solution is necessary for 
law enforcement to keep up with techno-savvy crimb 
nais, he said. At the same time, innocent people must be 
given protections. Whatever the Congress does decide 
to do, it must decide quickly, Baker said, or legislation 
will have been mooted by technological developments. 

Hew Legislation on Horizon* The subcommittee's hear- 
ing came a week after a White House official outlined 
plans by the Clinton administration to introduce a bill 
that would update both privacy laws and provisions I 
through which wiretapping in all its forms is utilized. 
The bilk which the White House has yet to send to Con- 
grass,, would regulate under what circumstances law 
enforcement could view, listen to and trace e-mails, cel- 
lular phone calls, and transmissions over cable net- 
works. 

Speaking at the National Press Club July 18, White 
House Chief of Staff John Fodesta said the bill "would 
amend statutes using outmoded language and that are 
hardware-specific so that they are technologically neu- 


tral, In other words, the legislation would apply equal 
standards to both hardware and software surveillance” 

The White House Is characterizing the proposal as 
one that would increase privacy protections by requir- 
ing that court orders authorizing the interception of 
e-mail be preapproved fey high level Justice Department 
officials. Additionally, the proposal would also make it 
easier to Identify someone who is calling or using elec- 
tronic means to contact an Individual by requiring only 
one "trap and trace” order to trace a call or Internet 
session back to the source. Currently, law requires an 
order to be Issued for each separate trace of an e-mail, 
which are usually bounced around by a number of dif- 
ferent Internet services during a transmission, thus re- 
quiring multiple orders to trace a single e-mail Any 
such orders must be Issued by a judge after a factual 
finding that the standard for criminal activity was met. 

The bill also allows for tracing to fee conducted with- 
out prior court approval in the case of m "emergency," 
such as actions that threaten national defense, or large- 


sion would grant authorities the same access to the In- 
ternet traffic of consumers using cable modems as 
those who use dial-up modems. 

"With our proposal, we would retain the underlying 
purpose of the Cable Act to keep confidential the list of 
shows that customer has watched,” Fodesta said, "but 
when cable systems are used to access the Internet 
through cable modems, we believe the rules should be 
the tough but sensible standards we also support for 
e-mails and telephone calls.” 

Though the White House has no target date for send- 
ing up the legislation, the administration is confident 
they will be able to work with Congress to pass the leg- 
islation. "We/ve been able to strike the middle ground, 
which will enable us to get there fairly quickly/' White 
House Spokesman Jake Siewert told BN A, 

Records 

DOJ Agrees to Release of Documents 
Underlying Report on FBI Crime Laboratory 

O ver 53,000 pages of background information per- 
taining to the Justice Department inspector gener- 
al's investigation of the Federal Bureau of Investi- 
gation's crime laboratory are subject to disclosure as a 
result of the recent settlement of a Freedom of Informa- 
tion Act suit, the National Association of Criminal De- 
fense Lawyers announced Juiy 7. NACDL and its then- 
press officer, Jack King, were the original plaintiffs in 
the suit and were later joined by Dr. Frederic White- 
hurst, a former employee of the lab whose allegations 
prompted the investigation. 

Besides allowing the plaintiffs to disclose the docu- 
ments, the settlement calls for the Justice Department 
to pay $355,000 in attorney's fees and to post a pointer 
on its website referring inquiries about the documents 
to NACDL’s and Whitehurst's websites, 

NACDL spokesman Todd Wells said the organiza- 
tion would make the materials available on compact 
disc for a cost of $40. Orders can be placed by calling 
(202) 872-8600. 
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SHOW: Cm TODAY 13:00 
July 24, 2000; Monday 
Transcript 3 OO072411V13 

TYPE : LIVE REPORT 
SECTION: News; Domestic 
LENGTH: 301 words 

HEADLINE: FBI Defends * Carnivore ’ E-Mail Wiretap on Capitol Hill 

BYLINE: Kyra Phillips, Pierre Thomas 

HIGHLIGHT: FBI officials are on Capitol Hill today defending their new wiretap 
for the information age. It's celled Carnivore and it's desicmed to 


selectively monitor computer e-mail to and from a suspe 


can omy oe used 


with a court order. Still, critics are concerned about possible privacy 


violations , 


THIS IS A 
■£ UPDATED. 


3PY MAY NOT BE IN ITS FINAL FORK AND 


KYRA PH ILL 


LLIFS, CNN ANCHOR : FBI officials are on Capitol Hill today 
heir new wiretap for the information aoe. 


It's called Carnivore and it's designed to selectively monitor computer e* 
mail to and from a suspect. It can only be used with a court order, still, 
critics are concerned about possible privacy violations. 


More now on the controversy. 


fere’s Just 


re co r re sponoen 


Hi, Pierre, 

PIERRE THOMAS, CNN JUSTICE CORRESPONDENT : Hi, Kyra, As you pointed out, 
the FBI says Carnivore is a new investigative tool which can tap into the e~ 
mail of a suspect, but only with a court order. But critics say it’s Big 
Brother on the Internet, And today, Congress wanted answers. 

(BEGIN VIDEO CLIP) 

UNIDENTIFIED MALE: Even a system designed with the best, of intentions to 
legally carry out essential law enforcement functions may be a cause for 
concern if it’s use is not properly monitored. 

REP. JOHN CONYERS (D) , MICHIGAN: Constitutional rights don’t end where 
cyberspace begins . 

(END VIDEO CLIP) 

THOMAS: But the FBI was quick to point out the restrictions that govern 
Carnivore. The FBI’s top lab official explained the safeguards, 

(BEGIN VIDEO CLIP) 

UNIDENTIFIED KALE: In every case we require a court order. That court 
order is specific to the numbers we target, if you will, the addresses we can 
target , 
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{END VIDEO CLIP) 





THOMAS : Today was a fact-finding hearing and there was one point of early 
agreement: Carnivore may not be the best name for this system — Kyra, 

PHILLIPS: All right, Pierre Thomas, thanks so much. 

TO ORDER A VIDEO OF THIS TRANSCRIPT, PLEASE CALL 8G0-CNN-NE&S OR USE OUR 
SECURE ONLINE ORDER FORM LOCATED AT www.fdch.com 
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LENGTH t 1097 words 

HEADLINE: From the Editor’s Desk.,* Paul Coe Clark III 
BODY : 

Who's Afraid Of The Big, Bad Carnivore? 

This week, it finally happened: the government made clear Its intent to 
expand wiretapping from switched voice traffic to Internet traffic* The 
implications for Xnterriet-service providers and cable operators are enormous * 

Last Monday, White House Chief of Staff John Podesta proposed a bill to 
{in my assessment) expand the voice wiretapping allowed under the 
Communi ca t ions 

Assistance for Lav; Enforcement Act to e-mail, Podesta defended the FBI’s 
"Carnivore * packet-sniffing software, which allows the government to read the 
address information and content of e-mail. 

My coverage of the proposal (C? 7/18) was quite restrained, as I wanted 
to give it fair scrutiny before judging it, 

I've given the plan that scrutiny, and 1 think it Vs a had one. Here 

are 

two reasons why: 

1} The administration avoided honest debate on the rationale for spying 
on citizens* Podesta , in particular, misrepresented the uses of wiretaps. He 
also was misleading in saying there had been no improper voice wiretaps, a 
* fact w he used to support IP wiretapping, 

FBI and Justice Department officials, in testimony to Congress, 
inevitably tout wiretapping as a solution to terrorism and child pornography - 

political hot-button crimes everyone opposes* That testimony draws favorable 
press coverage and congressional support. Who wants to be portrayed as 
supporting those crimes? 

Podesta hit the same theme in describing Title III of the 1968 Crime 
Control and Safe Streets Act, which set the rules for voice wiretapping. The 
administration wants to apply Title III -type rules to Internet spying, 

"It only 

allowed wiretaps in the most serious crimes, such as espionage, treason and 
crimes of violence, " Podesta said* 

But those are rarely the crimes against which law enforcement uses 
wiretaps* The 1999 wiretapping report by the Administrative Office of the 
United States Courts (available on the Web site of the Electronic Privacy 
Information Center) shows there were 1,350 Title III wiretaps last year. 

There 

were only 174 in 1968* 

The report includes a breakdown of the crimes that were the basis for 
each wiretap* A full 978 of the wiretaps in 1999 were drug cases* Agencies 
rarely mention that fact when seek wiretapping authority* because they know it 
weakens their argument* Tap cur phones because terrorists might blow someone 
up? Maybe so* Tap them because someone, somewhere, is smoking a joint? I 
don ' t know , 

Drug cases were followed by racketeering (139 cases) * Only when we 
get to homicides /assaults (62 cases) do we hit the * crimes of violence 1 - cited 
by Podesta. National -security wiretaps do not even come under Title III, but 
the Foreign Intelligence Surveillance Act. There were 886 wiretaps under FISA 
in 1999* No breakdown of those cases is available, so we can f t tell if they 
were indeed for treason and espionage. The FBI, of course, has a history of 
using national -security authority to wiretap such notorious menaces to the 
common weal as Martin Luther King Jr,* John Lennon, and any reporters who 
happen to annoy Richard Nixon, 
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Erodes fca said that all wiretapping has met Title III standards. * X know 
of no case in which a wiretap was thrown out" for violating those standards , 
he said, Not yet, maybe. But the current Ramparts police scandal in Los 
Angeles resulted in testimony about hundreds, if not thousands, of illegal 
wiretaps* X asked Podesta how he could reconcile that fact with his 
statement* Neither he nor his aides could. They had no answer, 

2) Carnivore IP wiretapping is fundamentally different from CALEA voice 
wiretapping. Taps on switched phone circuits, by their nature, record only 
the phone calls and tracing information of individual lines* Carnivore, by 
its nature, must intercept all traffic through an ISP to find the suspect 
messages. We have nothing hut the government * s assurances that it will ignore 
traffic for which it has no warrant. 

Carnivore also can read content of e-mails, as well as addressing 
information* Under Fades ta ’ s proposal, the government standard for 
intercepting address information would foe lower , as it is for pen-register and 
track- and- trace information for voice calls. A pen-register intercept, 
however , does not give access to the voice call* Carnivore gives access to 
the text of e-mails. Again, we have only the government 1 s assurances that it 
will ignore the content* 

Not all elements of the Po&esta proposal are bad. He proposes 
requiring probable cause {the Title III standard) to intercept the content of 
e-mail* And one element, the removal of the protections against cable 
surveillance in the Cable Act; of 1993, is inevitable, Whatever rules result 
from this legislation should surely apply evenly to ISPs of all technological 
stripes . 

The depressing thing is how eagerly the phone industry now supports 
CALEA, The Telecom Industry Association was involved in developing the J-STD- 
025 wiretapping standard and Carnivore, which was unveiled late last month at 
the TIA- organ i zed Joint Experts Meeting in Washington. "The FBI’s program is 
extremely sophisticated," TIA said Tuesday, Carnivore works with Microsoft*" 
Outlook, Lotus Notes and other e-mail programs, the association continued. 

Equipment vendors, who originally balked at CALEA, now consider 
wiretapping a profit center, ADC l AD C] just rolled out its NewNe t CALEAserver 
wiretapping line* Mt receives the intercepted communications data from 
various circuit- switched network elements, processes it to conform to the 
requirements of J- STD-02 5, and then distributes it to the appropriate LEA 
collection facilities , * the company said proudly Thursday* 

Converse Infosys [CMV7J also rolled out gear this week. "Converse 
Xnfosys is the industry leader in the legal interception market worldwide, * 
President Dan Bodner bragged. 

Current rumblings suggest ISPs are less happy about spying on their 
customers. Don’t be fooled, though — they’ll do it* The Podesta proposal 
and CALEA should be stopped before spy equipment becomes an inextricable Dart 
of our basic communications network. 

Paul Coe Clark III is the editor of Communi cations Todav . He can foe 
reached at (301) 340-7788, ext. 2037, or at pclarkEphiXIips .com. 
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SHOW; RIVERA LIVE *9:00 PM ET} 


July 24, 2000, Monday 


LENGTH : 1375 words 

HEADLINE? WHETHER THE GOVERNMENT SHOULD BE ALLOWED TO INTERCEPT INTERNET E- 
HAILS 

ANCHORS? DAN ABRAMS 
REPORTERS; JOE JOHNS 
BODY; 

Mr. DONALD KERR (Director, Lab Division, FBI}: Hackers break into financial 
service company systems and steal customers' home addresses and credit card 
numbers. Criminals use the Internet's inexpensive and easy communications to 
commit large-scale fraud on victims all over the world, and terrorist bombers 
plan their strikes using the Internet, Investigating and deterring such 
wrongdoing requires tools and techniques to — designed to work with new and 
evolving computer and network technologies . 

DAN ABRAMS, host: 

But now far should law enforcement be permitted to go to combat criminals? 
Should they be able to cap into someone's e-mail to see what is sent out and 
received? The FBI says yes, and they say they now have a new surveillance 
system that can isolate a suspect's messages without invading the privacy of 
others, an electronic strainer of sorts. They say it has the same effect as a 
phone ’wiretap, a rarely used technique to monitor a specific suspect with 
permission from a judge. But others say the FBI's new Carnivore system, as it 
is known f is an invasion of privacy., that it T s nearly impossible to isolate 
only the relevant e-mails and that the FBI would have access to far too much 
1 n f o rma t i on « To da y t h e debs t e 1 a need on Capitol Hill* NBC * s Jo e J ohns 
reports* 

JOE JOHNS reporting: 

Fears that e-mail from lav;- a bidding users of the internet could be swept up 
in a new FBI computer system designed to catch terrorists/ con artists and 
hackers led Congress to schedule today's hearing. But some on Capitol Hill 
say drastic action may be needed to put the brakes on the FBI e-mail, wiretap 
system known as Carnivore , 

Representative RICHARD ARMEY (Republican, Majority Leader } * Well, 1 would 
shut down Carnivore now if I were at the agency. 

JOHNS ; Carnivore is a computer application installed on a PC that agents 
connect to the hardware of an Internet service provider to search for specific 
senders and receivers of messages. The FBI needs a court order to use it and 
says only targeted information is retrieved, that no indiscriminate snooping 
is allowed. 

Mr. KERR: We ' re not in the, you know, broad surveillance business in any 
way* We're a law enforcement agency limited in what we do by what the courts 
order us to carry out. 

JOHNS; But many Internet service providers don't like it. 

Mr* CHARLES ARDAI (Juno Online Services): I think our customers would not 
take kindly to the idea that their private information could be available to a 
government agency. 

JOHNS: Still one scholar who specialises in privacy issues says it's a tool 
law enforcement needs. 
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Mr* AMI TAX ET2XGMI (George Washington University) : Now more and Tore 
communications advance through the internet Ard withmst* vni-erraAf'! 1 , 

FBI cannot do its job, Wltn ° ut intercepts, we —the 

Union his filS ^ i,T f 2 ce a chaUen « e * The American Civil Liberties 

code- that f rhPoi r f d f of request demanding Carnivore compute- 

Capitol government wants to keep secret. Joe Johns, NBC News, the 

nw f 5°® Kington is Ari Schwarts from the Center for 

Sf,‘S S°hKfSL l S; “*«■>«• »■»£ 

cybersnooping by the feds. * xUl * to dlscuss Carnivore and 

Mr. Schwarts, let-let me start with vou 
effect, than a wiretap? 


Why is this any different, in 


A f r . SCm-;ART2 (Analyst, Center for Democracy and Technology) • if 

dxfterent in a few ways. The -the biggest difference rinht m 

"f« S 4l S “f “iff ??' toe the X« ik-S. 

« «-vC , Ovx s on to tna internet: s^rvi ce Drovir J ^ v= 

Even tno internet service ~ v , *, p*g\ igs^ , 

different' than the S.y '*a- n^ - Know how it works. That** much 

.*1 P*.c**e~ U«ui-Ujan phone wiretapping happens now. 

»*■ i , 5* At '+‘ QO+hOUv> t ITS tXOHS to VAr 1013*5 « 

to say, 'Look* cror .« •ra^w vH,n ' ■ tt4Agu>3 paupiu 


’ s 


lot ho d i 


to <1 effBrr' r Al place, we ve got a system which is c 

oe-son-s f-! ,.:S; . :e a. phone tap. We can isolate exactly which' 

* * b ~ v,e v ‘ ant tw *-«P into. ' Ana with, you know, all of the 


We've got a system which is going 


cyberterrorism, in addition to 


nor 


*.u„ T : % xw which is occurring 

truuugn v,he ificti wet , i tm nfc a xot of paoDie aiT ^av^ft <tv? 
comfortable ^ x V p *>*/*ng, x a teex a lot iaor* 

,JBOk ’ l ' he!1 " -“BI can be snooping on possible terrorists.- 


i4v 


Hr , SCHWARTZ r Wei I, the- 
balance, and that's really i 
between privacy and --and th 
The problem that we've seen 
what— what gets pulled out : 
knowing what's kept in the ! 
different. As I .said, we tu 
can * t we just see the code : 


-there's n— there's nothing at— we- -what we need -:. 
«i#t we’re getting at here, is we need a balance 
s— tne kind of searches that you're talking about 
is that— the difference of showing a demo 'about 
r s different than s— than knowing the technology, 
; ogs, wnat can be retrieved later on. That's much 
.ve „x,e coue , or- -tor tne phone tapping system. vJhs 
m this case? “ ^ 


tha^^^^ent a D?oteSed h&t /V?® ar « u "' the argument on the other side is 
right? pi o tec tea and that it would allow hackers to break into it, 

Mr + SvHWAET2 i Wfili , th- “thst f s A V p , 1 y t'V.na t « | s + 

But, of course, again, as I said, we“have ?he ‘ same- -« h KTttl -® nC ^* * r8 * 
network thft di ?f t8l v pho £* network. We've had hackers in“ the~-in“the Sore S6t 
co£ S hJ v rit*opS U ' ^ Can>t We " We ShDUld ^ *» *>1« to see "this 

your — tf — i f nd " and S ° Uiat S y««r— that's your primary grip. I mean, is 

Mir, SCHWARTZ : Well, * c? f->io ^ ... . 

_ - s L.ne raam concern with ramixmrsi 

ff tL^estSn of tLT- ern ^ivore raises and shows for the future 

stion of the decay of the Fourth Amendment. Vfe're having a lot more 

ever have in n the S nast °whe°Tf ^ Wtems and on third-party systLs tha/we 
^ u&vo in tno past a V?herj the f rsifters of the -5 % jtvn s , 

Amendment, which is protections from 

government, people had the files in the^ r by the 

and knock on their door. That's no? S'c.JTfcda^ government had to come 
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Abrams : Nancy Grace, Fourth Amendment problem? 

Ms* NANCY GRACE ( Anchor , Court TV): Well, you know, of course that’s not 
what ^ ramars to mine when they wrote the Constitution* But, Dan, the 
Fourth Amendment has been applied for everything from abortion rights to what 
you carry in your car trunk, it can certainly be applied to computer access * 
My only concern is* you know, years and years and years of Fourth Amendment 
law regarding wiretap has developed over the past decades, and that same law 
needs to be applied now to intercepting Internet communications* It cannot be 
a fishing spree on the part of the government. On the other hand, a warrant 
allows you to open doors, open boxes, open mail and open the Internet. 

ABRAMS: Got to take a break* Our topic this part is Big Brother -s 
Watching* When we come back, we’re going to talk about a sheriff who is 
putting Web cams xn his prison. We *11 be back in a minute. 

{ Anno unc emen t s ) 


ABRAMS: Before we get to the sheriff who has installed Web cams in his 
prison, I want to talk to Michael Nasatir about this issue of this FBI procram 
tnat you can attach to Internet service providers to basical Iv look at what 
people are e-mailing* What do you think? 


Hr.* MICHAEL NASATIR t'Crimi 
gentleman from Washington is 
libertarians have a crack end 
be a secret. The technology 
t o kn ow wha t we ’ r e ob j e c t i ng 
do agree with Nancy Grace* 
specific and have the F— Four 


nal Defense Attorney): You know, I think whet the 
say i ng is, * Look , 1 et , s--let , s let the civi 1 


se ® what: they’re really going to do* It cannot 
nas got to be --we’ve got to be able to study it 
to or not objecting to. And at the very least I 
at them get a court order for- -and keep it 
th Amendment apply for sure. 


ABRAMS s Well — and I think 
have to make an application 
I want to thank Ari Schwartz 


cuere's no question that there would be- -they'd 
lor a warrant the same way they do with a wiretap, 
tor joining us and talking about this topic* 


LANGUAGE : Eng 1 ish 
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ABC NENS 

SHOW; WORLD NEWS THIS MORNING < 6 r 0 0 AN ET) 

July 24, 2000 i Nonday 

TYPE: Newscast 
LENGTH : 324 words 

HEADLINE: FBI E-MAIL SURVEILLANCE PROGRAM* COMES UNDER FIR™ 

ANCHORS; ANDERSON COOPER 
REPORTERS : ANDREA NcCARREN 
BODY; 

ANDERSON COOPER, anchor: 

. Fe 3eral agents say they’ve coma up with a high-tech way to find criminal 
PaC ® t0 ? lan *<*8, bat critics contend the system 

soes tDO far - That is the focus of a hearina on 
CapitOj. tocsy . Here now is ABC's Andrea McCarren. 

ANDREA KcCARREN reporting: 

(VO) The FBI says Carnivore is an essential law enforcement too 1 -o ice 
in tne rapidly growing world of cyber space. P~+ice 

Kr. DONALD KEEK {Assistant Director, FBI) ; The range of crimes that are 

tat ea oy computers didn't exist before, so we now have Internet fraud 
rather than iraua on paper, 

KcCARREN: (VO) The technology allows the FBI, with a court order, to «<*■ 

r!2?L? f private ?’“- ails s«X^ting out those to and from a 
p*ruC^&i ^rihdta; suspect, rut privacy advocates say the system is 
because it sorts through the private e-mail of innocent people, too' 

the^a^o-^hU— iV * C L S ? eC ^H SC} ; * c ‘ s * iittle bit like looking at all 

u '~ c ? °T a bigh^uy just to tina the blue Honda vou want, end 

extremely intrusive. * ' ‘C * i- * 

i V0! ? he Clinton administration proposed that the strict o-ivacy 
communications * PPiy t0 cel * phone service be extended to electronic 

‘-'C-ih P0 ;juoTA {white House Chief or Staff): What we're interested in is 
co«u,.g up with a balance that accounts for the needs of law enforcement to 

pursue pursue organized crime and narcotics traffickers but also protects -he 
privacy of individual Americans. i—o^ecoo -ne 

f . rH ^"'? SEK: { 1 0) ?Y* r the l « st the FBI has used Carnivore in about 2*> 

crimmax investigations, ^ ~ 

r^ulr-T^k Tit 3 5 OWin H p r v5cy concerns, the agency plans to submit 
Carnivore to a third party for an independent assessment. The FBI wants to 

public 8 that their^onlin^pri^c\T > is S n^otected !: ^ e And Jne reassure the 

, 7 online privacy is pi o lea tea, Anarea McCarren , ABC 

Washington. 4 


LANGUAGE ; English 
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ABC NEWS 

SHOW: WORLD NEWS TONIGHT (€:30 PM ST) 

July 24, 2000, Monday 

TYPE: Newscast 
LENGTH: 442 words 

PRESIDENT CLINTON RETURN'S TO CAMP DAVID TO ASSIST IN PEACE TALKS; BX 
DEFENDS E-KAIL MONITORING SYSTEM 
ANCHORS; PETER JENNINGS . 

REPORTERS; JOHN COCHRAN 
BODY: 


PETER JENNINGS, anchor: 

At Camp David in Maryland, day 14. The Israeli and Palestinian leaders 
have holed up for two weeks now with hardly a leak to the news media, 

which in itself is quite remarkable. President Clinton, just back from Japan, 
spent much of xast night and most of today in the talks, desperately, we are 
toj.d, trying to coax the parties into some kind of a deal, ABC’s John 
is covering Camp David for us* 


shn, looking at your notes to da 


a am nis t r a t ion o f 
look good at all? 


y, 'Not looking good, senior 
txciaiB will take a miracle, f say the Palestinians, do esn‘t 


JOHN COCHRAN reporting; 


That * $ right, Peter. A senior administration official told me, just a 
short time ago he believes the talks will end one way or the other this week 

not optimistic. On top of that, Palestinian officials 

vOia new s, tney «eneve it will take a miracle to achieve a breakthrough, 

Tne key s tumb ling block, not the only stumbling block, but the key one, 
continuing to be Jerusalem, So much so, that today, the negotiators s imply 
took that subject off the table and concentrated on other issues* 


JENNINGS ; So why did they take --John, John, why do they take Jerusalem off 
the cable and expect they can get anywhere like a deal? 

COCHRAN; Well, what they would like to do is to try to get an agreement on 
land and security and they are getting the director of the CIA, George Tenet, 
to help them on this security issue. If they can resolve those issues, maybe 
they can go back to- -to the issue of Jerusalem. What they would like, Peter, 
is to get at least a partial agreement this week, something that will enable 
both sides to come back at least in August and keep banging away. 

JENNINGS; OK, John Cochran covering Camp Maryland for us. There “s the kev 
phrase, partial deal, Jerusalem has always, always been the final issue. 

The FBr was on Capitol Hill today defending its e-mail monitoriiig system 
the ominous -sounding Carnivore, against concerns that it casts too wide" a net* 
The agency told Congress today it only uses the system to eavesdrop on 
suspected terrorists, computer hackers and other criminals, not on law-ahidino 
citizens. Some people will not be convinced. 


When we come back, a plague of grasshoppers in Texas, 

Mr. JAMES ROBINSON (Entomologist) ; These are some of the worst outbreaks of 
insects for our cattlemen in the state that I’ve witnessed. ' 

JENNINGS; And surviving a storm off the Louisiana coast. Was it murder or 
self-preservation? 
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Announcer; WORLD NEWS TONIGHT with Deter Jen n- 
brought to you by... 

(Commercial break) 

LANGUAGE : Engl i sh 
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CBS News Transcripts 

SHOW: CBS EVENING NEWS (6:30 PM ET) 

July 24, 2000/ Monday 

TYPE : News cast 
LENGTH; 462 words 

HEADLINE: NEW SURVEILLANCE SOFTWARE ALLOWS sm? wa 

USERS* E-MAILS A^LIMS a HE FBI TO SNOOP THROUGH COMPUTER 

ANCHORS : JOHN ROBERTS 
REPORTERS: JIM STEWART 
BODY ; 

JOHN ROBERTS ? anchor: 

lawSLrl^conJerns ^^?. Capi * oi MiU today to respond to 

potential for abuse.' Cri tirs fear ® Ur ' / ® i i 1&ace P ro 9 ra ® aR<2 its 

so easy, it leaves ordinarv'LericaS Cnl^rahfe^ < IR ® f government snooping 
Jim Stewart has more. nS Wlnerable to invasion of privacy. CBS* 

J I K STEWA RT 1 * <gp o r t i-nq ; 

Every day, more than a billion e-mai 1<? «,•,„ . • 

users , and the FBI tMnV«* " 1S ® sent and received by computer 

guy. But the problenTfor acet ? U8t a ® fon ? of them as the next 
all the gibberish to find «y meani nglul evi d2£* ft/Z r lT^° Ugh 

£K,“ tfclnte “’* £o “- «* -»■*'- in ;“« tra ^ s iS S3S “ M 

Mr. LARRY PARKINSON (General Counsel, FBI!: This •* s-deso-' <-e ,>n 
unfortunate name, this is a tool that is very surgical" P * 

it 'S'nSthing^orf'thin^ Sl^o^utef tL^B^ca^l 0 ” "%*' Ph ^ icall V' 
*“» of “ «*wm ..me.' SS, ISToSS?* 

of reaomg every AOL customer's e-mail it**- LS , m : B I instead 

lust the 7T3^s«sao^«! ___> r * ^ V -*£S*9nk-d to *ero in and record 

J a.wsages sent to ana from one particular e-mail address, 

KERR (Director, Lab Division, FBI! * We don * r- ■. ^ r , , 

or surveillance with this ««•►«, 1 \ ve aor> t «° broad searches 

in my view could not be ' ihat 8 not etherized by a court order end, 

STEWART: Critics, however, immediately asked: Who's watching the watchers? 

STEWART: The reason for the skepticism is t-hrtra* » u ^ 

between wiretapping the Internet and wiretapping a telephonl if^h 
to hug your telephone, they get a court nrH*bi- ^ ^ th& FBI wants 

the phone company makes the connection for f L w£ to H- e £ hone company, and 

wiretap your Internet addres^^h^ get a coSrt order ' , J* WantS to 

the connection themselves, Y g urt or ^ er and then they can make 

They ve done it 16 times this year already T 

hackers, and the potential list of ^ &§temst Internet 

aa^nre x ij.se or suspects and their crimes is arowina 

agents warned. Four years from now, the nuir iber of cojumerri^ ^ ' ?7? mngi> 
alone is expected to top 200 billion * WAr . commercial e-mail messages 

Washington. millon a yeax ‘ Stewart, CBS News, 

ROBERTS: And next up on the CBC FVPttTMn 'Miywe ~ , 

V wii ujc EVENING NEWS, a new scheme to bilk the old 
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and steal their trust, 
{Graphic on screen) 

CBS Market Watch 
DOW JONES INDUSTRIALS 
CLOSE dawn 48.44 10, 685.12 
NASDAQ 

CLOSE down 112 , 88 3,581.5? 
CBS - MARKETWATCH - COM 
{ Annomicemen t s ) 
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CBS Mews Transcripts 

SHOW: THE OSGOOD FILE (Various Times} 

July 25, 2000, Tuesday 

TYPE: Commentary 
LENGTH ; 445 words 

FBI FIRE FOR USING INTERNET SOFTWARE TO WATCH SUSPECTS' E~ 

REPORTERS: CHARLES OSGOOD 
BODY: 

CHARLES OSGOOD reporting: 

THE OSGOOD FILE. Charles Osgood on the CBS Radio Network. 

The FBI is able to read supposedly private e-mail and oth*r intern#* 
tratfxc using a svstem called r^rr^wnr* t Q "; internet 

dictionary L ^ fiL£ ttf' Uar**voxe, Carnivore, according to the 
is any ilesn-eetino animal n-r ^ „ 

u » OI plant. Not to worry# says the FBI, 

Mr. LARKY PARKINSON (General ro^wl rw*. 

this is a tool that is very — J DeBpite xts ^tortunate name 


ry surgical 


OSGOOD: Where have we heard that before? Stand bv, 
{Announcements } 


OSGOOD: The American Civil Liberties Union is conce-n^d to -w ^ aey .. 
about the FBI’s Carnivore system for snooping on £e Internet * " S! " 

Unidentified Kan Si; This is the equivalent of coinc to the no*-*- n*fir-> •»•** 
stationing an FBI agent there Iook<ncr at t»~e / s pc " °i C4 - t,s 3TJd 

letter that goes through. ' ~ C accessing intormation of every 

Dona?d°Kerr K °' Xt ’® nothing like that at says the FBI Lab Division's 

„.L vei^S^ K ff R t i FBI Lab Divisior ' ) : »« don’t do broad searches or 
surveillance with this system, 

OSGOOD : The bureau is bcino v@rv ako a u An+l . - , 

civil rights with Carnivore > i-uL — P ^° w violating anybody’s 

^naore, say^ tne r*>I general counsel Larry Parkinson. 

-Vi'' ^'^KlhSQN: Tnis is a tool that is deployed rarely and it i<* never 
deployed without a court order. * ll ~ iS ,xever 

nP ?!f°2 D: / n ? ther words ' ’Trust us.* 'Not good enough,' savs Alan Davids™ 
t5rie Center for Democracy and Technology. n Davidson 

access r^,i^ VIDS ° N ( ^ nter . for Democracy and Technology).- Carnivore has 
^ k L ?w l information than it is legally entitled to collect How do 

2£»*a , «£St5'“ C,,rr - 1TOI ' ? “O'* *> “• *■»* «h« kind .f lSSh h« 

£ » 

Mr. KEVIN DiGRRGORY (Deputy Attornov General) * m*« v - - 

confront every day in the Shvsical ^rid 2™ til' Y ? f the crimes th «t we 
world. Physical world are beginning to appear in the online 

the°online world^to? tbat occur the physical world occur in 

onixne world, too. That’s why Congress is now taking an interest in 
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